Re: transparent firewall??

Bernd Eckenfels (ecki@lina.inka.de)
Thu, 06 Dec 2001 19:25:11 +0100


In article <5.0.2.1.0.20011205114948.01a65410@pop.mail.yahoo.fr> you wrote:
> I'd like to know if anyone has a transparent firewall that is one that
> doesn't make any rules on the traffic but only always pass it without this
> beeing notified by the rest of the network system...

There are 2 ways to add a computer into the stream (besides sniffing), you
can set up a bridge, it is forwarding packets without having to have a own
ip address and without the need of reconfiguration. Of course you can use a
router to do the same, it just needs routing table modifications.

If you want to look at the data stream on an application on a (TCP) socket
level, you can use the transproxy function of linux kernel. It will redirect
a connection which is done through a router to any local process. Those
local process then can contact the original destination, having effectively
beeing a man in the middle. There are a lot of tools out there to do this.

You may want to tell us, what you are trying to do.

Greetings
Bernd
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/