Re: Programming Firewalls

[Rick Murphy <rmurphy () mitretek org>]

"John Byrne" <COM40017 () PAT ITCARLOW IE> writes:
> I've got the source code for the FWTK but it's not all that easy to
> port over Windows.  Any help would be greatly appreciated because
> I've ran into all dead ends so far.

You wouldn't want to try to use the FWTK proxies on Windows - it'll run
like molasses.
The fwtk proxies fork a new process for every connection; that makes sense
on a UNIX
platform because UNIX systems have fairly low process creation cost. For
Windows,
you want to avoid process creation as much as possible. You'll have to
rewrite everything
to be multithreaded, which means fixing all the dangling memory and FD
leaks and recoding
all the "input is FD #0" assumptions all over the code.  You're in for a
LOT of work.
        -Rick