> Thanks for the information Harald.  I take it you don't comment on how
> ipchains/ipfwadm NAT does this?  That knowledge would also be very much
> appreciated as there are still (mostly) 2.2 -kernel boxes around.

I haven't commented on it, since I don't know too much about the 
ipfwadm/ipchains code.  But from my point of view, they implement either
1 or 2 from your list.

> Pekka Savola                 "Tell me of difficulties surmounted,

-- 
Live long and prosper
- Harald Welte / [EMAIL PROTECTED]               http://www.gnumonks.org/
============================================================================
GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M+ 
V-- PS++ PE-- Y++ PGP++ t+ 5-- !X !R tv-- b+++ !DI !D G+ e* h--- r++ y+(*)

Reply via email to