Masquerade

[Martin Tomasek]

firewall si udrzuje tabulku existujicich spojeni

pro linux a netfilter:

Connection tracking (required for masq/NAT)
CONFIG_IP_NF_CONNTRACK

Connection tracking keeps a record of what packets have passed
through your machine, in order to figure out how they are related
into connections.

This is required to do Masquerading or other kinds of Network
Address Translation (except for Fast NAT).  It can also be used to
enhance packet filtering (see `Connection state match support'
below).

On Mon, 18 Feb 2002 07:28:47 +0100, Arthur Jeneovský wrote:
> Jde o to, ze kdyz pocitac z vnitrni site posle treba ping pres firewall
> kde je maskarada, objevi se na cilovem pocitaci paket, ktery jako
> zdrojovou adresu ma adresu firewallu. V poradku. Co mi neni jasne je to
> jak firewall pri ceste paketu zpet pozna ze reply neni pro nej ale pro
> pocitac ve vnitrni siti a pro kterej? Prohlizel jsem tcpdumpem paket a
> zadnou informaci o adrese pocitace ve vnitrni siti podle me neobsahuje.
> Jak to ten firewall vi ?


-- 
Martin Tomasek, mtd na email.cz
BOFH excuse #15:
temporary routing anomoly