OSS passive firewall

[f0x () squirrelsoup net]

About an OSS passive packet monitoring thing.  I know openbsd can do
direct interface to interface packet forwarding, and you can add a bunch
of ip-chains ish stuff to this to make a completely invisible yet quite
functional firewall.  A very good description of what exactly I mean by
this and how to go about doing it can be found here:
http://www.openlysecure.org/openbsd/how-to/invisible_firewall.html  It's
pretty interesting a terribly secure (terribly in a good way :-p).

Gabe Arnold
www.squirrelsoup.net

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html