On Wed, Nov 05, 2003 at 01:34:01AM +0100, Goetz Bock wrote: > > Dear list, > > as googeling did not turn up anything nor did a browsing through the > lists archive turn up anything usefull, I'll just have to ask. i think the issue of a smb connection tracking and/or nat module has already been discussed 2-3 years ago. It's just that nobody has written one so far. patches welcome ;) > It looks like if the conntacking modules (all from stock 2.4.22) are not > ablel to relate the reply a.b.c.24.netbios-ns > a.b.c.17.32769 to the > request a.b.c.17.32769 > a.b.c.31.netbios-ns. no, of course not. connection tracking can just deal with symmetric connections (a.b.c.d:e -> v.w.x.y:z and replies v.w.x.y:z ->a.b.c.d:e). Everything else can only be achieved with connection tracking helpers. > Is there a conntrack_netbios-ns or am I doing something wrong? no, as indicated above, nobody has contributed one yet. > /"\ Goetz Bock at blacknet dot de -- secure mobile Linux everNETting -- - Harald Welte <laforge@xxxxxxxxxxxxx> http://www.netfilter.org/ ============================================================================ "Fragmentation is like classful addressing -- an interesting early architectural error that shows how much experimentation was going on while IP was being designed." -- Paul Vixie
Attachment:
pgp00662.pgp
Description: PGP signature
