Re: nating netlogon (NT domain) packets?

2002-04-12 Thread Harald Welte
On Thu, Apr 11, 2002 at 10:15:46PM +0200, Rönnblom Janåke /Teknous wrote: I want to be able to to logon to my NT domain from behind my NAT box. I have win9x workstations that are connected to the internet through a linux machine which uses NAT. These win9x machines need to be able to

Re: nating netlogon (NT domain) packets?

2002-04-12 Thread Serge Droz
First of all, you should use some VPN with encryption when passing such traffic over the internet. Hmm, not sure anout that. We have a Domain controler here for all users. But certain parts need extra security for their data (medical records etc). So we'd like to get the normal userinfo

Limit module, counters reset on ANY changes

2002-04-12 Thread Tomas Edwardsson
I have been told that this is the intended behaviour of netfilter but I still need to fix it and I am wondering if someone has a patch or can point me in the general direction on how to change the behaviour explained in this mail.

Re: [PATCH] Lower timeout in TIME-WAIT state on conntracks

2002-04-12 Thread Emmanuel Fleury
Hi all, Mikkel Refsgaard Bech wrote: Hi, This patch provides a new target called LOWTW, which gives the ability to change the timeout in the TIME-WAIT state on connections in the conntrack table. It always accept packets. This is useful when you have a _lot_ of short-lived

[PATCH] icmp type-3-code-13 for REJECT

2002-04-12 Thread Brad Chapman
Mr. Harald, Here is a patchset to add ICMP type-3-code-13 to the REJECT target. Patches are enclosed and MIME'd. I only made a patch for the IPv4 version, though; if you want an IPv6 version, I can make that too. Brad snip type-3-code-13.patch: --- ipt_REJECT.c.orig Fri Apr 12

Re: Connection track logging

2002-04-12 Thread Alex Kent
OK, I am a bit confused as to what to use and patch. I took a look at libctnetlink and ctrace and it looks like a program based on these using the event notification could be used quite easily to produce the sort of connection logging that would be very useful. The patch from