path: root/contrib/ipfilter/FWTK/README.ipfilter
diff options
authorPeter Wemm <peter@FreeBSD.org>1997-03-02 15:40:21 +0000
committerPeter Wemm <peter@FreeBSD.org>1997-03-02 15:40:21 +0000
commitb182e52bf6b074c57140cca8cf3a1c812cb195b1 (patch)
tree0c47f6260ed69e9661116832151ae20f9162b28c /contrib/ipfilter/FWTK/README.ipfilter
parentb4ebec5bf8828aa1cc3f5a1a50faf812b5b6ba48 (diff)
reimport ipfilter v3.1.8 to get it onto the vendor branch again.vendor/ipfilter/3.1.8
Notes: svn path=/vendor/ipfilter/dist/; revision=23279 svn path=/vendor/ipfilter/3.1.8/; revision=23281; tag=vendor/ipfilter/3.1.8
Diffstat (limited to 'contrib/ipfilter/FWTK/README.ipfilter')
1 files changed, 20 insertions, 0 deletions
diff --git a/contrib/ipfilter/FWTK/README.ipfilter b/contrib/ipfilter/FWTK/README.ipfilter
new file mode 100644
index 000000000000..fd461cc6cfd8
--- /dev/null
+++ b/contrib/ipfilter/FWTK/README.ipfilter
@@ -0,0 +1,20 @@
+there was a patch for fwtk with ip_filter 3.1.5 from James B. Croall
+(thanx for his work) which I put onto fwtk 2.0beta.
+Now, if you decide to do transparent proxying with ip-filter you
+have to put -DUSE_IP_FILTER to COPTS in Makefile.config.
+With Solaris 2.x you have to correctly replace the path to your
+ip_filter sources. (lib/hnam.c needs ip_nat.h)
+I also patched plug-gw to be configured to accept not only one
+destination with the parameter "-all-destinations" in netperm-table.
+Perhaps this is a security hole...
+The patched fwtk worked fine for me with linux (kernel 2.0.28 and ipfadm 2.1)
+and Solaris 2.5 (ip_filter 3.1.5).
+If you try to enhance the transparent proxy features for other
+architectures, see lib/hnam.c (getdsthost).
+Michael Kutzner, Michael.Kutzner@paderlinx.de