[HECnet] Multinet Tunnel Connections to SG1::

[Dave McGuire]

On 06/07/2012 06:24 AM, Mark Benson wrote:
So we agree security is a storm in an espresso cup.

  Well put. :)

If you farm it out to a low cost dedicated device it's not costing you
CPU cycles on your work computer.

MAC address spoofing gets around the issue of source MAC address from
a DECnet stack.

pcap gets around finding incoming packets that are fror your DECnet stack.

What issues remain that stop you using a non-kernel solution?

My only concern now is if the stack has to run as root how do
non-privileged ysers use it?

  Howabout starting it as a daemon (running as root) via the boot
scripts, and have non-root users's programs access it via a socket?

                      -Dave

-- 
Dave McGuire, AK4HZ
New Kensington, PA