[zorp] Re: Supported OS' for Zorp firewall

Balazs Scheidler bazsi@balabit.hu
Wed, 18 Jul 2001 13:03:30 +0200


On Wed, Jul 18, 2001 at 11:03:35AM +0200, Andreas Pauley wrote:
> Hi,
> I would like to know on what Operating Systems will Zorp run.
> Are FreeBSD and OpenBSD supported?

0.9.1 was successfully compiled under FreeBSD, however only TCP based
proxying works, forging TCP source addresses and UDP connection tracking
doesn't.

The core of Zorp is quite platform independent, but some features require
platform dependent functions, which are either not implemented under *BSD,
or we don't know how they can be used.

Works:
* redirection via ipfw or ipfilter, Zorp finds the original destination
  (requires --enable-ipfilter configure option)

Doesn't work:
* setting the outgoing source IP address of TCP connections (required when
  you want to send real client IPs to a server in your protected zone)
* intercept connections without REDIRECT rule (used by the FTP proxy when
  the data channel is established)

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1