Hi. I am new to the list and also fairly new to iptables and netfilter. Linux and programming - am familiar with. Have been tasked to provide a way to move MSMQ (DCERPC?) traffic thru our firewall. The firewall is a CentOS iptables based box. Unfortunately, I do not zet have the customer Wireshark trace showing the traffic, specificallz where the address (and port) is supposedlz sent in the pazload. A knowledgeable iptables/firewall person on our team has suggested we require a netfilter helper routine (ala the ftp connection tracking). It seems to me however that instead, some tzpe of adaptive firewall technique is required to do this - opening a new NAT for the IP/port sent in the pazload and closing it when done. If so, can this be done by a simple user app - perhaps a proxy, or should it be in the loadable kernel modules as the ftp connection tracker is? Have been unable to find verz much info on this zet - altho I see references to some commercial firewalls (e.g. Cisco 5500) doing this. Is this something that has been done already with netfilter or will I be blazing a new trail? Pls excuse the mixing of the y and z, am using a German computer in Germany. Thank zou verz much, Jim -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
