identd

[Patrick Welche <prlw1%cam.ac.uk@localhost>]

Code inspection suggests that identd forwarding with ipfilter is broken.

     -m filter     Enables forwarding of ident queries.  The filter argument
                   specifies which packet filter should be used to lookup the
                   connections, currently `pf' and `ipfilter' are supported
                   packet filters.  Note that identd changes the ident queries
                   to use the local port on the NAT host instead of the local
                   port on the forwarding host.  This is needed because other-
                   wise we can't do a lookup on the proxy host.  On the proxy
                   host, ``proxy mode'' should be enabled with the -P flag or
                   ``lying mode'' with the -L flag.

Any hints on how to set up an identd proxying testbed? (i.e., an experiment
to test the theory?)

Relates to http://gnats.netbsd.org/50198

Cheers,

Patrick