Re: [Package Suggestion] Socker

["Jeremy C. Reed" <reed%reedmedia.net@localhost>]

On Fri, 24 Feb 2006, Christian Biere wrote:

> and a library.  The helper program must be installed with the
> setuid-bit set for user root.  When executed, this helper program
> socker checks whether the user is allowed to create a socket with the
> specified parameters. If permissions are granted, socker creates and
> binds a socket using given parameters. The socket is then passed back
> to the caller."

Since this has to be setup by root in the first place, why not use address 
translation in a packet filter instead? I am curious ... what are the 
benefits/negatives of address translation versus using "socker"?

 Jeremy C. Reed

                         technical support & remote administration
                         http://www.pugetsoundtechnology.com/