[2446] in linux-net channel archive
Re: OK, now that we agree
daemon@ATHENA.MIT.EDU (Alan Cox)
Wed Apr 10 11:11:26 1996
From: iialan@iifeak.swan.ac.uk (Alan Cox)
To: shaver@neon.ingenia.com (Mike Shaver)
Date: Tue, 9 Apr 1996 18:01:16 +0100 (BST)
Cc: avalon@coombs.anu.edu.au, linux-net@vger.rutgers.edu
In-Reply-To: <199604091441.KAA22244@neon.ingenia.com> from "Mike Shaver" at Apr 9, 96 10:41:11 am
> How much trouble would it be to allow some bizarre and illegal bind()
> address (255.255.255.255 springs to mind) register a socket as being a
> transparent proxy/user-space masquerade?
>
> It would seem relatively straightforward, but I suspect there are
> things here that I'm forgetting about.
setsockopt(my_socket, SOL_SOCKET, SO_MASQUERADE, &one,sizeof(one))
[note at the socket level, ipx masquerading is very very useful for ISDN
because of the keepalives]. Better make it root only too.
Alan
