Next: Notify Up: Service Daemons Previous: TELNETD and FTPD

Generic Service Passer

As installed, the Eagle blocks the passage of all network services into and out of your network, with the exception of SMTP (electronic mail). Since e-mail is a universal service customers want, it passes transparently and you need do nothing to the Eagle to configure it. You can enable other network services to pass under the control of a powerful rules-based authorization file. Since most customers want to be able to use the common ftp and telnet services, the ability to permit the passage of these services and to control who can use them, both inside of and outside of your Eagle-secured network is a standard part of the software. Furthermore, you can choose to permit the passage of other network services on a service-by-service basis, and limit the use of them on a user-by-user basis, with our flexible Generic Service Passer. The Generic Service Passer allows you to do so by importing (or exporting) a service from a computer on one side of the Eagle to a machine on the other side.

The Generic Service Passer waits for connections on specified ports, opens connections to specified hosts, and then simply copies packets from one to the other. For UDP, which has no notion of a connection, a pseudo-connection is made that will close down after one minute of inactivity.

Details on the use of this facility are found in Chapter .


tkevans@delmarva.com