[zorp] Zorp vs. FreeBSD 4.3 (x86)

[Kis-...@mail.balabit.hu]

Hi,

> Someone has experience Zorp install under FreeBSD? I try to compile, but
> the "MSG_PROXY" is not defined in my enviroment.
It's from the UDP-based proxy, and only av. in the LK2.2.x...
(Used to send UDP packets with fake IP-s ...)

Regards,

--
Kis-Szabo Andras BUTE - Schonherz Dormitory
---------------------------/ Favourite tools: Zorp, NetFilter
ki...@sch.bme.hu /---------------------------------333-->>>>.Info

[Fo...@mail.balabit.hu]

Hello,

Someone has experience Zorp install under FreeBSD? I try to compile, but
the "MSG_PROXY" is not defined in my enviroment.

If you can help me (source patch, install instruction, etc.), please
drop me a mail.

(If not necessary, I wouldn't port the main source.)

Best Regards,
Tamas FOLDI

. . _ __ ______________________________________________________ __ _ . .
Foldi Tamas - We Are The Hashmark In The Rootshell - Security Consultant
cr...@kapu.hu - PGP: finger://cr...@thot.banki.hu - (+3630) 221-7477

[Bal...@mail.balabit.hu]

On Wed, May 09, 2001 at 01:56:06PM +0200, Foldi Tamas wrote:
> Hello,
>
> Someone has experience Zorp install under FreeBSD? I try to compile, but
> the "MSG_PROXY" is not defined in my enviroment.
>
> If you can help me (source patch, install instruction, etc.), please
> drop me a mail.
>
> (If not necessary, I wouldn't port the main source.)

I'm trying to port Zorp over to FreeBSD, my burner is currently burning the
install CD. Apart from the UDP and TCP transparency Zorp should be quite
portable. TCP transparency is a matter of about 50 lines of code (this is
about querying the kernel the real destination address), UDP is a different
matter. That will require either kernel patches or implementing the whole
mess with raw sockets (which I wouldn't like to do for several reasons). For
now I'll try to disable the UDP part on platforms which don't have MSG_PROXY
and other magic things.

--
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1

[Bal...@mail.balabit.hu]

> > Someone has experience Zorp install under FreeBSD? I try to compile, but
> > the "MSG_PROXY" is not defined in my enviroment.
> >
> > If you can help me (source patch, install instruction, etc.), please
> > drop me a mail.
> >
> > (If not necessary, I wouldn't port the main source.)
>
> I'm trying to port Zorp over to FreeBSD, my burner is currently burning the
> install CD. Apart from the UDP and TCP transparency Zorp should be quite
> portable. TCP transparency is a matter of about 50 lines of code (this is
> about querying the kernel the real destination address), UDP is a different
> matter. That will require either kernel patches or implementing the whole
> mess with raw sockets (which I wouldn't like to do for several reasons). For
> now I'll try to disable the UDP part on platforms which don't have MSG_PROXY
> and other magic things.

I successfully compiled zorp on FreeBSD. I had to disable the following
Linux/i386 specific features:

* Connection tracking (new in 0.9)
* stack dump upon SIGSEGV
* Linux ipchains/netfilter
* POSIX capabilities

none of these is fatal for most functions. However while trying to test the
resulting binary, I wanted to add my first ipf rule in my life :) and failed
miserably. I tried to enable IPFilter using

ipf -E

but this resulted in the following error:

freebsd# ipf -E
open device: Device not configured
SIOCFRENB: Bad file descriptor

And although this seemed bad, I added a rule just for curiousity:

freebsd# ipf block from all

nothing happened (I was logged in through ssh, so I should have been blocked
myself). Don't tell me I must compile a FreeBSD kernel :)

Any help is welcome.