From owner-freebsd-security Mon Jan 22 12:37:59 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail.gmx.net (pop.gmx.net [194.221.183.20]) by hub.freebsd.org (Postfix) with SMTP id B241F37B401 for ; Mon, 22 Jan 2001 12:37:41 -0800 (PST) Received: (qmail 25650 invoked by uid 0); 22 Jan 2001 20:37:40 -0000 Received: from p3ee21646.dip.t-dialin.net (HELO speedy.gsinet) (62.226.22.70) by mail.gmx.net (mail08) with SMTP; 22 Jan 2001 20:37:40 -0000 Received: (from sittig@localhost) by speedy.gsinet (8.8.8/8.8.8) id SAA25234 for freebsd-security@FreeBSD.ORG; Mon, 22 Jan 2001 18:01:03 +0100 Date: Mon, 22 Jan 2001 18:01:03 +0100 From: Gerhard Sittig To: freebsd-security@FreeBSD.ORG Subject: Re: Failover firewalls with ipfw? Message-ID: <20010122180102.V253@speedy.gsinet> Mail-Followup-To: freebsd-security@FreeBSD.ORG References: <20010122084251.N9165@gsmx07.alcatel.com.au> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <20010122084251.N9165@gsmx07.alcatel.com.au>; from peter.jeremy@alcatel.com.au on Mon, Jan 22, 2001 at 08:42:51AM +1100 Organization: System Defenestrators Inc. Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Mon, Jan 22, 2001 at 08:42 +1100, Peter Jeremy wrote: > > As a related issue, has anyone developed code what would allow > two boxes to share natd map entries? (dummynet is a > requirement, so suggestions to use IPfilter/IPnat, or similar, > won't work). This would allow a NAT'd TCP connection to > fail-over between two boxes. Although I never did this, the list archive holds repeated reports on successfully running ipf and ipfw in tandem. So you can use ipfw for dummynet (and maybe uid / gid stuff?) and ipf for filtering / translating. See the archive for the sequence the packets are handed up in. Or UTSL. virtually yours 82D1 9B9C 01DC 4FB4 D7B4 61BE 3F49 4F77 72DE DA76 Gerhard Sittig true | mail -s "get gpg key" Gerhard.Sittig@gmx.net -- If you don't understand or are scared by any of the above ask your parents or an adult to help you. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message