From mboxrd@z Thu Jan 1 00:00:00 1970 From: forsyth@caldo.demon.co.uk To: 9fans@cse.psu.edu Subject: Re: [9fans] Firewalling MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="upas-asdywzhfjrtgkiujjrpyvphjht" Message-Id: <20020130142538.E7BAC199EC@mail.cse.psu.edu> Date: Wed, 30 Jan 2002 14:22:09 +0000 Topicbox-Message-UUID: 493b693a-eaca-11e9-9e20-41e7f4b1d025 This is a multi-part message in MIME format. --upas-asdywzhfjrtgkiujjrpyvphjht Content-Disposition: inline Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit with several interfaces on the machine you can assign them to distinct IP stacks. the services on an outside stack can be distinct from those on the inside stack. i do this at home and at work to control access to services. one of the interfaces can be bind to the `pkt' interface, which allows a process to act as source and sink of IP packets for that interface. such a process can have pkt interfaces set on separate IP stacks and can therefore do arbitrary filtering between them (but you need to write that code). see man 3 ip for a start. --upas-asdywzhfjrtgkiujjrpyvphjht Content-Type: message/rfc822 Content-Disposition: inline Return-Path: <9fans-admin@cse.psu.edu> Received: from punt-2.mail.demon.net by mailstore for forsyth@caldo.demon.co.uk id 1012220356:20:15563:2526; Mon, 28 Jan 2002 12:19:16 GMT Received: from psuvax1.cse.psu.edu ([130.203.4.6]) by punt-2.mail.demon.net id aa2121327; 28 Jan 2002 12:07 GMT Received: from psuvax1.cse.psu.edu (psuvax1.cse.psu.edu [130.203.16.6]) by mail.cse.psu.edu (CSE Mail Server) with ESMTP id 85DE6199BE; Mon, 28 Jan 2002 07:03:20 -0500 (EST) Delivered-To: 9fans@cse.psu.edu Received: from mercury.bath.ac.uk (mercury.bath.ac.uk [138.38.32.81]) by mail.cse.psu.edu (CSE Mail Server) with ESMTP id B454F19A08 for <9fans@cse.psu.edu>; Mon, 28 Jan 2002 07:02:19 -0500 (EST) Received: from news by mercury.bath.ac.uk with local (Exim 3.12 #1) id 16V9jf-0004n4-00 for 9fans@cse.psu.edu; Mon, 28 Jan 2002 11:14:03 +0000 Received: from GATEWAY by bath.ac.uk with netnews for 9fans@cse.psu.edu (9fans@cse.psu.edu) To: 9fans@cse.psu.edu Message-ID: Organization: University of Bath Computing Services, UK Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: [9fans] Firewalling Sender: 9fans-admin@cse.psu.edu Errors-To: 9fans-admin@cse.psu.edu X-BeenThere: 9fans@cse.psu.edu X-Mailman-Version: 2.0.8 Precedence: bulk Reply-To: 9fans@cse.psu.edu List-Help: List-Id: Fans of the OS Plan 9 from Bell Labs <9fans.cse.psu.edu> List-Archive: Date: Mon, 28 Jan 2002 11:13:00 GMT Hey, I got Plan 9 installed and am playing around with it. I have one question though, is there any firewalling/packet filtering software for Plan 9? Thanks in advance. --upas-asdywzhfjrtgkiujjrpyvphjht--