On Fri, 24 Feb 2006, Christian Biere wrote:

> and a library.  The helper program must be installed with the
> setuid-bit set for user root.  When executed, this helper program
> socker checks whether the user is allowed to create a socket with the
> specified parameters. If permissions are granted, socker creates and
> binds a socket using given parameters. The socket is then passed back
> to the caller."

Since this has to be setup by root in the first place, why not use address 
translation in a packet filter instead? I am curious ... what are the 
benefits/negatives of address translation versus using "socker"?

 Jeremy C. Reed

 	  	 	 technical support & remote administration
	  	 	 http://www.pugetsoundtechnology.com/