There must be a way to distinguish locally originated/terminated traffic. Linux provides hooks (NF_*_LOCAL_IN/OUT) for locally originated/terminated traffic that supports this nicely. Without such a hook it is difficult to protect the firewall host with a more restrictive policy than fused for routed traffic.
Solaris pfh does provide NH_FORWARDING, but the feature needs NH_LOCAL_IN and NH_LOCAL_OUT as well. Have I overlooked something? This message posted from opensolaris.org _______________________________________________ networking-discuss mailing list [email protected]
