RE: [UPnP-SDK-discuss] Usage Scenario

[Reynolds, Alfred]

snip
 
 But this thread is about how we can provide UPnP port mapping within 
 iptables/netfilter in a sensible manner, not how poor the reality of 
 Internet security actually is when you do not trust your clients at 
 all. I say providing UPnP with a adequate level of security for the 
 scope where UPnP is useful is entirely possible.
 

On a different, but related point, has anyone ever looked into the usage
profiles for netfilter? Is it mainly big iron networks, or small NAT'd home
networks? I personally use netfilter to NAT my home network to the world via
ADSL. In this situation UPnP could be useful. For an ISP, it probably isn't
(but you shouldn't really be NAT'ing then either...).

Perhaps this argument can be settled by saying its for small, home users who
want to have a home lan connected. Not for large ISP/Corporate environments
:)

RE: Suitability of Netfilter for Emulator Project

[Reynolds, Alfred]

http://www.antd.nist.gov/nistnet/

You might want to look at that project before you start duplicating work. I
also seem to remember a netfilter based emulator, but I can't find the
reference to it at the moment...


 -Original Message-
 From: Wei koong Chai [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, March 14, 2002 11:41 AM
 To: [EMAIL PROTECTED]
 Cc: Wei koong Chai
 Subject: Suitability of Netfilter for Emulator Project
 
 
 Hi...
 
I am currently doing a project on Satellite IP Network Emulator
 whereby I have to setup a bridge and then through the bridge 
 (emulator), I
 need to add satellite link elements (such as longer delay, 
 diff. queue,
 higher BER etc. etc.) to the emulator to create a synthetic satellite
 environment.
 
Basically, I would like to add some routines that mimic 
 satellite link
 before a packet is forwarded from source to destination 
 through a bridge.
 
I used brctl to setup my emulator setup as below:-
 
   Satellite  EMULATOR
+-+  ++(ip packet) 
  +-+
| LAN |--|(eth0) Bridge 
 (eth1)|-#--| LAN |
+-+  ++  (added xtra delay 
 etc.)+-+
 
After consulting Lennert Buytenhek (the author of brctl itself), he
 recommends me to use Netfilter for my project.
 
Here's the questions and doubts that I have:-
 
 [1] Is Netfilter suitable for my project?
 [2] If yes, please give me some pointers on where and how 
 should i start?
 (I am currently trying to digest all the documentations about 
 Netfilter and iptables.)
 [3] If no, please give a some recommendations on what should 
 i use as a
 foundation to build on for my current project.
 
 Thank you.
 
 
 
 
 Cheers,
 Wei Koong CHAI
 CCSR
 University of Surrey
 UK