IP filtering and NAT
The IP filtering and NAT (Network Address Translation) io-pkt* module is a dynamically loadable TCP/IP stack module.
The lsm-pf-*.so module provides high-efficiency firewall services and includes such features as:
- rule grouping—to apply different groups of rules to different packets
- stateful filtering—an optional configuration to allow packets related to an already authorized connection to bypass the filter rules
- NAT—for mapping several internal addresses into a public (Internet) address, allowing several internal systems to share a single Internet IP address.
- proxy services—to allow ftp, netbios, and H.323 to use NAT
- port redirection—for redirecting incoming traffic to an internal server or to a pool of servers.
The IP filtering and NAT rules can be added or deleted dynamically to a running system. Logging services are also provided with the suite of utilities to monitor and control this module.