> Would it be interesting to write a generic proxy that included > support for each protocol? I mean, instead of running a proxy for > X, Y and Z, you could run 1 proxy and enable/disable support for > each application with the rdr rules.
Monolithic pieces of security-oriented sofware are inevitably a bad idea. We should probably cobble together a plugboard proxy, however, as a kind of sample for proxy writers. -kj
