[Sorry, i hit "send" too soon... delete my previous mail]
this is my first mail to the m0n0wall developers list - it's my first
mail to the whole m0n0wall community.
I found out about m0n0wall about 2 months ago when i needed a flexible
platform for possible projects. I work for a small company in IT-security
and we were not satisfied with the existing solutions in the low budget
So we bought a few WRAP boards and began evaluating m0n0wall...
It's a great piece of software and we are extremly satisfied with
it as a whole.
However, in a current project we needed TCP relaying features, which
m0n0wall currently can't provide.
I won't go into all the details. Please believe me, that we really needed
a TCP relay for remote SSH access to several machines.
Since i didn't find a solution in the n0n0wall mailing list archive, i
coded an image, based on the current 1.2b7. You may download it
Before you ask: No, i won't do images for other platforms. Since this is
highly inofficial :-) i'd rather wait for a comment from Manuel.
I added three small programs:
/usr/local/bin/sockjoin (plus /usr/lib/libstdc++)
I assume, that you are familiar with netcat in this list.
The sources to miniidentd and sockjoin are available at
Here's the usage info:
./sockjoin: 2 non-option arguments expected
Usage: ./sockjoin [-td] <endpoint-1> <endpoint-2>
-t<timeout> specifies timeout. default is 3600 seconds
-d enables debugging
<port> for listen operation
<ip-addr>:<port> for connect operation
- for use of stdin/stdout (inetd)
usage: ./miniinetd [-v] [-m max_children] <port|service> <cmd>
./miniinetd will liste on on <port> (TCP only)
and whenever a connection is established it will spawn the specified command
with fd 0,1 and 2 set to the connection.
With miniinetd+netcat or alternatively sockjoin it is possible to
relay TCP connections:
Simply type "sockjoin 22001 target-ip:22" in the "exec.php" page and add a
rule on the WAN interface, allowing connections on port 22001 to the
m0n0wall-ip and you're done. That's what i'm doing to get SSH access to our
Question: Is this feature planned for an official image? If it is, i
won't spend time coding a GUI for the relays. If it is not, i'd very much
like to have at least a "sockjoin" binary in the 1.2 release image.