On Mon, Apr 09, 2001 at 02:12:22PM +0200, Thomas Lopatic wrote:
> [...]
> For the packet filtering code you are perfectly right. The advisory should
> have said so. Still, the NAT code seems to also add entries to the decision
> cache. Unfortunately I do not currently have the time to take a closer look
> at the NAT code, so I do not know about the implications of this for packet
> filtering.
>
> If you find anything interesting in there let us know. :-)
I has a closer look at this. It looks like entries are added to the desision
cache only for proxies:ip_ftp_pxy, ip_raudio_pxy, ip_rcmd_pxy. Basic NAT
shouldn't change the desision cache, but I very well may have missed
something :)
--
Manuel Bouyer, LIP6, Universite Paris VI. [EMAIL PROTECTED]
--
