[svlug] kernel masquarading with stateful UDP?

[Ira Abramov]

I just noticed... I have an intranet with private IP addresses (10.x.x.x)
and a masquarader firewall, and ICQ works fine through it... it requires
to send and recieve UDP packets, and that means the masqing firewall has
to have statefull UDP so packets can come in as reply... it does it very
smartly, apperently, since we have quite a few people on the intranet
running ICQ and they all authenticate seperately and successfully with the
central server, but I was always told that statefull UDP for firewalling
was never implemented (well, maybe in the latest 2.1.x kernels, which my
firewall is not using right now, I like my 186 day uptime :-)

anyone got an angle on this?

-- 
Ira Abramov          (°-               L I N U X              -°)
whois: IA58          //\                                      /\\
www.scso.com         v_/_ Because a 486 is too good to waste _\_v




--
echo "unsubscribe svlug" | mail majordomo at svlug.org
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ to unsubscribe