search for: demasquerade

...-t nat -s inside_net -d 0/0 -j MARK --set_mark 100) eth0 = outside iface eth1 = inside iface now: tc filter add dev eth0 ... handle 100 fw should catch packets marked by the above rule in ipchains (iptables). Ok. When the packet returns, the masq/nat code will find it in it''s table and demasquerade it (as if by an invisible inverse rule). Question: Will the demasqueraded packets also bear the mark 100? And will tc filter add dev eth1 handle 100 fw Work? I am probably missing something, as I haven''t been able to make it work this way. Any suggestions, please? I want to shape the...

I''ve kept this one on the back burner for a while, waiting for it to mature before attempting to use it, and now having seen OpenBSD ship with IPSec I''m getting a bit impatient =). What is the status of IPSec for Linux (and more specifically RedHat)? By this I mean I just did some www browsing/etc and found about a half dozen different implimentations, ranging from NRL, to a