natd auth requests

2006-02-10 Thread Wojciech Puchar
how can i make ident service to make informative answers for connections 
handled by natd? like answering last byte of source IP number or DNS 
reverse name or maybe from table like oidentd?


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: natd auth requests

2006-02-10 Thread Chuck Swiger
Wojciech Puchar wrote:
 how can i make ident service to make informative answers for connections
 handled by natd? like answering last byte of source IP number or DNS
 reverse name or maybe from table like oidentd?

If you're using 1-to-1 NAT forwarding, run identd or the inetd-based version on
the internal hosts you're forwarding to.  If you're using NAT to only forward
individual ports to specific machines, or are using NAT for outbound connection
sharing only, well, you can only forward ident requests to a single machine; I
don't know of a better solution.

Interesting problem...

-- 
-Chuck
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: natd auth requests

2006-02-10 Thread Lowell Gilbert
Wojciech Puchar [EMAIL PROTECTED] writes:

 how can i make ident service to make informative answers for
 connections handled by natd? like answering last byte of source IP
 number or DNS reverse name or maybe from table like oidentd?

How about running oidentd, if you already know it does what you'd
like?  It's in ports.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: natd auth requests

2006-02-10 Thread Wojciech Puchar

handled by natd? like answering last byte of source IP number or DNS
reverse name or maybe from table like oidentd?


If you're using 1-to-1 NAT forwarding, run identd or the inetd-based version on
the internal hosts you're forwarding to.  If you're using NAT to only forward
individual ports to specific machines, or are using NAT for outbound connection
sharing only, well, you can only forward ident requests to a single machine; I
don't know of a better solution.

Interesting problem...

i use to forward about 200 machines through one IP (+ipfw2 to manage 
bandwidth). all works fine except no authentication of user is possible.


for NetBSD i wrote a simple program (identd replacement) that parsed
ipnat -l output and made and answer.

but under FreeBSD there is no thing similar to /sbin/ipnat -l with natd.

or maybe is? something that will output natd map table.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: natd auth requests

2006-02-10 Thread Wojciech Puchar

connections handled by natd? like answering last byte of source IP
number or DNS reverse name or maybe from table like oidentd?


How about running oidentd, if you already know it does what you'd
like?  It's in ports.

well that's what i needed.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: natd auth requests

2006-02-10 Thread Wojciech Puchar

number or DNS reverse name or maybe from table like oidentd?


How about running oidentd, if you already know it does what you'd
like?  It's in ports.

well that's what i needed.
___



oidentd is an ident (rfc1413 compliant) daemon that runs on Linux,
FreeBSD, OpenBSD and Solaris.  oidentd can handle IP masqueraded/NAT 
connections

on Linux, FreeBSD (ipf only) and OpenBSD.  oidentd has a flexible
  ^^


NOT WHAT i needed unfortunately

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]