302 reputation
316
bio website
location
age
visits member for 3 years, 8 months
seen 2 days ago

Jul
28
accepted using bgp without owning ASN
Jul
28
asked High %system and %si cpu time on Linux
Jun
17
comment Linux does not NAT IPs without defining as IP alias
Actually I read most ofthe howto. The specific page says the packets you NATed should come back to you for deNAT. No problem. In my case I am already the router and all of the packets has to come to my router.
Jun
15
comment Linux does not NAT IPs without defining as IP alias
This is al LÄ°nux router. It should be able to process(route, NAT etc) packets not destined to itself.
Jun
14
comment Linux does not NAT IPs without defining as IP alias
The important point is packets are already routed by frontend router. I see the packets in incoming interface already. The point is that, NAT does not work until I add the destiation IP as IP alias.
Jun
14
comment https proxying with squid and local CA produced site certificates
We use squid as https_proxy also. The configuration directive is https_port 8443 ..... The problem is wedo not want squid pucsh a single certificate for each request. We want it to create certificate specific to the target web server, on the fly.
Jun
14
comment https proxying with squid and local CA produced site certificates
Yes. Of course we warn the users.
Jun
14
asked https proxying with squid and local CA produced site certificates
Jun
14
asked Linux does not NAT IPs without defining as IP alias
May
16
asked adding iptables rules for a user after authenticating himself
May
15
asked using bgp without owning ASN
May
7
asked using “include” like statement in pf.conf to include some parts from other files
Apr
26
awarded  Scholar
Apr
26
awarded  Supporter
Apr
26
accepted blocking packets larger then specific size with pf
Apr
20
awarded  Student
Apr
20
asked blocking packets larger then specific size with pf