From owner-freebsd-security Thu Jan 14 10:19:03 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA11042 for freebsd-security-outgoing; Thu, 14 Jan 1999 10:19:03 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from kamna.i.cz (kamna.i.cz [193.85.255.30]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id KAA11017 for ; Thu, 14 Jan 1999 10:18:55 -0800 (PST) (envelope-from mm@i.cz) Received: (qmail 12306 invoked from network); 14 Jan 1999 18:17:45 -0000 Received: from woody.i.cz (@193.85.255.60) by kamna.i.cz with SMTP; 14 Jan 1999 18:17:45 -0000 Message-ID: X-Mailer: XFMail 1.3 [p0] on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=iso-8859-2 Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <199901141747.UAA25352@paranoid.eltex.spb.ru> Date: Thu, 14 Jan 1999 19:17:45 +0100 (MET) Reply-To: mm@i.cz From: Martin Machacek To: ark@eltex.ru Subject: Re: examples rules ipfw Cc: security@FreeBSD.ORG Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On 14-Jan-99 ark@eltex.ru wrote: > nuqneH, > > More than strange way to do. natd is ugly. Agreed. Maybe I should try ipfilter. Does anybody know whether NAT that comes with ipfilter handles rsh correctly. > why not to use TIS fwtk instead? Because of license. I unfortunately need it for a customer as a temporary solution until they gather enough budget to buy Gauntlet (which is not the greatest solution either). Martin --- [PGP KeyID F3F409C4]] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message