[Click] nat-pt module assistance

[luca.capisani at virgilio.it]

>Hello!
Hi

>Thank you for the information.  I am hoping to map as
>much capablity for the IPv4 host as possible.  I did
>read about needing Application Level Gateways (ALG)
>for services like FTP and DNS and believe I understand
>that well.  My big concern is trying to find a way to
>use IPSec.  If I had the below setup:
>
>IPv4Host-----Click+NAT-PT------IPv6Network----IPv6Host
>
>I know I cannot use IPSec all the way from IPv4Host to
>IPv6Host.  What I was wondering is if there was a way
>to use IPSec from the 'Click+NAT-PT' machine to
>IPv6Host for all of the IPv4Host traffic.  I was
>looking for a way that it would be normal IPv4Host to
>Click+NAT-PT, but then gain the additional benefits of
>IPSec once it hits the IPv6Network...
>

well,  as I told you, mapping IPv4 address can be done modifying the examples
in  NATPT module. For IPSec, you can use it on a IPv4 host directy or putting
another host between IPv4 host and CLICK. But, if click is well-configured,
it can do nearly all that IPsec does.
See you
Luca M. Capisani

DIS - Dipartimento Informatica e sistemistica
University of Pavia, Italy

>-Scott
>
>--- luca.capisani at virgilio.it wrote:
>
>> Hello!
>> Using a NAT-PT module for only one IPv4 host is
>> simple, but it depends what
>> features you want to realize...
>> For example, is very simple doing a static address
>> mapping (4 - 6) and traslate
>> the packages in either the directions. You have only
>> to modify the examples
>> that you can find in the add-on modules. Remaind
>> that if you want the DNS
>> and FTP connectivity, you have perhaps to install
>> and configure the apposites
>> modules... i haven't tested this modules yet.
>> For the basic firewall rules, you can realize it
>> directly in click code
>> dropping the packets that maches to a particular
>> rule
>> If you have more questions, ask
>> Luca M. Capisani
>> DIS - Università di Pavia, ITALY
>> 
>> 
>
>
>__________________________________________________
>Do You Yahoo!?
>Tired of spam?  Yahoo! Mail has the best spam protection around 
>http://mail.yahoo.com