Great Circle Associates Firewalls
(October 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: CyberGuard. (fwd)
From: Steve Uurtamo <uurtamo @ insync . net>
Date: Tue, 1 Oct 1996 08:32:13 -0500 (CDT)
To: firewalls @ greatcircle . com

Having some joy with the CyberGuard.

In particular, I need to proxy a service that after
making its first connection through the firewall will
need to establish connections through exactly 2 future
ports for the remainder of the service.  These ports
are in the "free zone" (>1024).  

I have to do NAT on all of the packets as the internal 
machine has a non-routable address. (10.x.x.x)

Given that I can parse the packets well enough to figure out 
what those future ports are going to be (yes this is a proprietary 
service), what is a good place to start as far as writing my own 
proxy using the proxy source code on the CyberGuard.  Should I
be looking at the way FTP handles future connections for data?

Or maybe I'm doing this all wrong.


Thanks for any help anyone can give in advance.




Steve Uurtamo


Follow-Ups:
Indexed By Date Previous: Gauntlet vs. Sidewinder
From: "Bouchard, Alexis, 2Lt,SAM/GNCP" <BOUCHARDA @ comm . hq . af . mil>
Next: Re: Checkpoint
From: "John H. Kerr" <jhkerr @ ashton . csc . com>
Indexed By Thread Previous: RE: Gauntlet vs. Sidewinder -Reply
From: Harris Demel <harris @ novell . com>
Next: Re: CyberGuard. (fwd)
From: Adam Shostack <adam @ homeport . org>

Google
 
Search Internet Search www.greatcircle.com