Subject: Re: Transparent Proxying
To: None <itojun@iijlab.net>
From: Matthew Mondor <mmondor@gobot.ca>
List: tech-kern
Date: 05/14/2002 08:26:04
On Tue, 14 May 2002 18:28:45 +0900
itojun@iijlab.net wrote:

> 	though only for IPv6, we have this functionality implemented as
> 	faith(4) interface.  under the following condition:
> 	- sysctl net.inet6.ip6.keepfaith=1, 
> 	- listening socket has setsockopt(IPV6_FAITH) set,
> 	- a IPv6 packet gets routed to faith(4) interface
> 	the listening socket will hijack any inbound connection.
> 
> 	i'm still not 100% sure if modelling it as an interface is the
> 	right thing to do. (for instance, faith(4) model does not handle
> 	link-local IPv6 address case)
> 
> 	openbsd seem to have the functionality implemented as combination of
> 	PF packet filter and ftp-proxy(8).
> 	i guess you will want to check it out.

Thanks alot, I will definitely check those out, PF as in BPF(4)? It is
true that faith(4) when looking at it seems alot like it...

Matt