On Sun, Jan 07, 2007 at 03:11:34PM +0100, Harald Welte wrote: > > So instead of using NAT to dynamically redirect traffic to local > > addresses, we now rely on "native" non-locally-bound sockets and do > > early socket lookups for inbound IPv4 packets. > > It's good to see a solid implementation of this 'old idea'. > > Just as a quick historical note to netdev: This is the way how the > netfilter project advised the balabit guys to implement fully > transparent proxy support, after having seen the complexity of the old > nat-based TPROXY patches.
Didn't rusty tell the balabit guys to use the NAT approach? - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
