I have a machine in a rack where I can get free power and free
bandwidth. In return it is available as a time server with good
integrity (multiple GPS and HF receivers). It is also a member of the
ntp pool project, and that is where my problems begin.
The monowall 1.3 in front of it acts as a router - it has routable
addresses on both wan interface and the one my machine is on, and there
is no NAT involved for the traffic between the wild internet and my machine.
The normal traffic is not a problem; When Turk Telecom's broken DNS
points all of Turkey at me, however, the state count in monowall goes
up. Fast. And it sometimes exhausts the 30k state table, at which point
all traffic suffers.
What I need is primitive, stateless packet pushing between the two
interfaces. Preferably without adding another box in front of it, since
the monowall also acts as 6to4, pptp, and nat for the lan.
Is there a way to get stateless routing through editing the XML? Or do I
need to do a custom image using my truly lacking pf skills?