From owner-freebsd-current@FreeBSD.ORG Sat Mar 12 11:46:12 2005 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4E78216A4CF for ; Sat, 12 Mar 2005 11:46:12 +0000 (GMT) Received: from smtphost.cis.strath.ac.uk (smtphost.cis.strath.ac.uk [130.159.196.96]) by mx1.FreeBSD.org (Postfix) with ESMTP id 57BBA43D2F for ; Sat, 12 Mar 2005 11:46:11 +0000 (GMT) (envelope-from chodgins@cis.strath.ac.uk) Received: from [192.168.0.4] (chrishodgins.force9.co.uk [84.92.20.141]) j2CBk4An003426; Sat, 12 Mar 2005 11:46:04 GMT Message-ID: <4232D7C3.1010903@cis.strath.ac.uk> Date: Sat, 12 Mar 2005 11:51:31 +0000 From: Chris Hodgins User-Agent: Mozilla Thunderbird 1.0 (X11/20050204) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Antal Rutz References: <20050311223413.GA5126@mimoza.pantel.net> In-Reply-To: <20050311223413.GA5126@mimoza.pantel.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-CIS-MailScanner-Information: Please contact support@cis.strath.ac.uk for more information X-CIS-MailScanner: Found to be clean X-CIS-MailScanner-SpamCheck: not spam, SpamAssassin (score=-4.9, required 6, autolearn=not spam, BAYES_00 -4.90) X-CIS-MailScanner-From: chodgins@cis.strath.ac.uk cc: current@freebsd.org Subject: Re: Transparent proxy feature? X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Mar 2005 11:46:12 -0000 Antal Rutz wrote: > Hi, > > Nowadays I have to use a special firewall software ('zorp') but > unfortunately it only runs on linux. the reason is that only linux > has the feature (transparent proxying) to listen on/send packets (sourcing) > from other IP addresses than the machine has. (maybe with an extra kmod) > > The developers told me that they aren't familiar with FreeBSD but would > port their software to it if the OS had support for that t-proxy. > > The question is: Is there any plan to support that thing (maybe through > ipfw, pf or ipfilter - no idea) or is that too sick? > > thanks alot. I have used transparent bridging with FreeBSD in the past and it worked great for this sort of thing. http://www.kozubik.com/published/freebsd_bridging_ipfw.txt Chris