New target

Allen Francom aef at
Tue Feb 14 01:52:19 CET 2006


With IPSec, can you "require" any communication from to to be encrypted ?

IPTables might be able to enforce a requirement for
encrypted communications.

Just a thought...


On Mon, 13 Feb 2006, Rennie deGraaf wrote:

> Hash: SHA1
> Gervasio Bernal wrote:
>> Rennie deGraaf wrote:
>>> Gervasio Bernal wrote:
>>>>> Hi all!!!
>>>>> I have developed a new target for iptables that encrypts a
>>>>> communication. I would like to send it so that you can see it and prove
>>>>> it. And the possibility that in a future adding it to iptables.
>>>>> Which are the steps to follow?
>>>>> Thanks a lot!
>>> Our of curiosity, what advantages does your method have over IPSec?
>>> Rennie
>> The great advantage is the ease of use. You only need to put 2 iptables
>> rules in each endpoint of communication. One rule for encryption and the
>> other for decryption. IPSec is a little more complicated to configure.
> Well, I'd be interested in taking a look at your design.  How about
> posting your design and source somewhere so that we can take a look at it?
> Rennie
> Version: GnuPG v1.4.1 (GNU/Linux)
> iD8DBQFD8Sj7IvU5mZP08HERApcYAJ4pOmVyYQJRdI7fuj2PSgjUjF4C2wCeNwie
> kOW7cV2dIM3st6SQnsM09G8=
> =6K7k

More information about the netfilter-devel mailing list