[Leaf-devel] ipchains redirect

2001-09-24 Thread Scott C. Best
Leaf'rs: Heyaz. Saw this on security-basics this AM. Never saw it mentioned on LRP/LEAF before; anyone ever try it? Alternatively, is IP Transparent Proxy enabled in any LEAF kernels? Seems terribly powerful to me. TIA! -Scott -- Forwarded message -- Date: Wed,

Re: [Leaf-devel] ipchains redirect

2001-09-24 Thread David Douthitt
Scott C. Best wrote: Heyaz. Saw this on security-basics this AM. Never saw it mentioned on LRP/LEAF before; anyone ever try it? Alternatively, is IP Transparent Proxy enabled in any LEAF kernels? Seems terribly powerful to me. I've done this before, I think; it can be nice,

Re: [Leaf-devel] ipchains redirect

2001-09-24 Thread Charles Steinkuehler
I haven't played with this much, but one of the things on the list of stuff to play with one of these days is using redirect to provide for an 'internal server' machine, similar to the way the low-end firewall boxes do. I *think* this would work properly for everything from game servers to VPN

Re: [Leaf-devel] ipchains redirect

2001-09-24 Thread Scott C. Best
David: Yeah, a transparent web-proxy or web-cache gets handled pretty nicely by this. If the proxy could http forward you could even redirect the packets to an external, remote proxy. That'd be useful for apps which used a LEAF router to gateway a wireless-LAN into wide-area