Firewall Wizards mailing list archives

RE: Port funnels?

From: carson () tla org
Date: Thu, 15 Apr 1999 14:40:28 -0400 (EDT)

"Bill" == Stout, Bill <StoutB () pioneer-standard com> writes:


Bill> So, if there were an application-level 'funnel', which intercepts internal
Bill> calls to specific ports, listens to incoming traffic from inetd, and funnels
Bill> that to one port pair (all the while keeping track of proper sessions), now
Bill> that would be useful.  Essentially this would be a built-in application
Bill> gateway doing port-level NAT through software. Much easier to filter all
Bill> these non-firewall friendly applications.  Sounds odd, but my Packet
Bill> Throtting post did too.

Sounds like a lightly modified SOCKS library would do what you want.

-- 
Carson Gaspar -- carson () cs columbia edu carson () tla org carson () cugc org
http://www.cs.columbia.edu/~carson/home.html
Queen Trapped in a Butch Body

Current thread:

Port funnels? Stout, Bill (Apr 13)
- Re: Port funnels? David Gillett (Apr 14)
- <Possible follow-ups>
- RE: Port funnels? Stout, Bill (Apr 15)
  - RE: Port funnels? carson (Apr 15)
- RE: Port funnels? Technical Incursion Countermeasures (Apr 15)
  - Tristrata (was RE: Port funnels?) Marcus J. Ranum (Apr 15)
    - Re: Tristrata (was RE: Port funnels?) -reply mht (Apr 15)