On black magic...

[hearth_spirit]

I am a firewall god. I can convince appliances to do things they were never meant to do. You probably don't want to ask for details unless you really care about the innards of iptables on a linux platform.

... Making the world safe from spammers, malware, and rootkits, one machine at a time.

Comments

[nicegeek]

Details? :-)

[hearth_spirit]

Geek.

I managed to convince an Untangle (www.untangle.com) firewall to allow outgoing masqueraded connections to the mail server from its openvpn clients, thus preventing the "transparent" and often problematic proxying by hotels of SMTP and IMAP connections from our brave road warriors.

All it took was making a new script in an obscure directory to add a black magic incantation telling iptables that the nat table needed a masquerade rule for the openvpn subnet, on a machine that was only ever designed to be administered via GUI. :)

[kneesroverrated]

I can convince appliances to do things they were never meant to do.

Apparently I fail at geek, because my first thought was, "What did you do to your frig?" ;-)