On Fri, 24 Feb 2006, Christian Biere wrote:
> and a library. The helper program must be installed with the
> setuid-bit set for user root. When executed, this helper program
> socker checks whether the user is allowed to create a socket with the
> specified parameters. If permissions are granted, socker creates and
> binds a socket using given parameters. The socket is then passed back
> to the caller."
Since this has to be setup by root in the first place, why not use address
translation in a packet filter instead? I am curious ... what are the
benefits/negatives of address translation versus using "socker"?
Jeremy C. Reed
technical support & remote administration
http://www.pugetsoundtechnology.com/