Having some joy with the CyberGuard.
In particular, I need to proxy a service that after
making its first connection through the firewall will
need to establish connections through exactly 2 future
ports for the remainder of the service. These ports
are in the "free zone" (>1024).
I have to do NAT on all of the packets as the internal
machine has a non-routable address. (10.x.x.x)
Given that I can parse the packets well enough to figure out
what those future ports are going to be (yes this is a proprietary
service), what is a good place to start as far as writing my own
proxy using the proxy source code on the CyberGuard. Should I
be looking at the way FTP handles future connections for data?
Or maybe I'm doing this all wrong.
Thanks for any help anyone can give in advance.
Steve Uurtamo
Follow-Ups:
|
|