Great Circle Associates Firewalls
(December 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: How can I route packet by service port?
From: Darren Reed <avalon @ coombs . anu . edu . au>
Date: Wed, 11 Dec 1996 10:50:47 +1100 (EDT)
To: Ryan . Russell @ sybase . com (Ryan Russell/SYBASE)
Cc: yoondark @ rose . oes . samsung . co . kr, firewalls @ GreatCircle . COM
In-reply-to: <9612101702 . AA03114 @ notesgw2 . sybase . com> from "Ryan Russell/SYBASE" at Dec 10, 96 09:06:07 am

In some mail from Ryan Russell/SYBASE, sie said:

> From: yoondark @ rose.oes.samsung.co.kr (DuckSang Yoon) @ smtp
> Date: 12/10/96 05:33:57 PM
> Subject: How can I route packet by service port?
> 
> Hello, everybody.
> I'm using CISCO7000, CISCO2500, and I installed a firewall a month ago.
> Let's say this firewall is located between A and B.
> 
>    B Host
>   _ _ _ _                  |                     |
>  (        )    ----------  |   application       |
> ( Internet )-/-| Router |--|     gateway         |
>  (_ _ _ _ )    ----------  |  ------------       |
>                            |--| Firewall |-------|         A Host
>                            |  ------------       |       _ _ _ _ _ 
>                            |                     |      (          )
>                            |     <========>      |--/--(  Internal  )
>                            |   General Packet    |     (  Network   )
>                            |                     |      (_ _ _ _ _ )
>                            |     ----------      |
>                            |-----| Router |------|
>                            |     ----------      |
>                            |                     |
>                            |    <=========>      | 
>                               Specific Packet
> 
> 
> I want to make it like this.
> Usually, General packet go from A to B through firewall.
> But specific packet go through just a router not firewall
> from A to B (like oracle sql*net, smtp).
> is there any routing solution to route packet by kind of
> appllication(port number).

IP Filter 3.1.2 lets you do this by specfying an interface and IP
address for which you want to send the packet to.  It was done
(mainly) for supporting logging packets to a network device but
it can also be used to perform simple routing.

Basically it allows an arbitary destination to be specified in
combination with any filtering rule and will even duplicate
packets (if so desired) to achieve this.

See:
http://coombs.anu.edu.au/~avalon/ip-filter.html

Darren


References:
Indexed By Date Previous: Re: BoS: Delete permissions on files (Was: RE: Why would someone want an NT firewall?)
From: Bob Beck <beck @ obtuse . com>
Next: Re: Unix vs. Windows NT
From: "Jamie Thain" <jthain @ cat . bbsr . edu>
Indexed By Thread Previous: Re: How can I route packet by service port?
From: prasad <prasad @ cinops . xerox . com>
Next: Re: How can I route packet by service port?
From: Jim Wamsley 303-673-8163 <jim @ coltano . stortek . com>

Google
 
Search Internet Search www.greatcircle.com