Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 4 Apr 1997 16:04:40 +0300 (IDT)
From:      Nadav Eiron <nadav@barcode.co.il>
To:        Joachim Kuebart <joki@kuebart.stuttgart.netsurf.de>
Cc:        questions@freebsd.org
Subject:   Re: Gateway
Message-ID:  <Pine.BSF.3.91.970404160036.12019A-100000@gatekeeper.barcode.co.il>
In-Reply-To: <Pine.BSF.3.95q.970404143316.487A-100000@shire>

next in thread | previous in thread | raw e-mail | index | archive | help


On Fri, 4 Apr 1997, Joachim Kuebart wrote:

> Hi!
> 
> When hosts in a local 10.0.0.X net want to access the internet (http, ftp
> etc.), doesn't it require IP Masquerading? And if so, where can I find it
> in FreeBSD?

There is more than one way to skin a cat (hopefuly Jordan doesn't read 
this :-) )...

You can either go with a "transparent" proxy solution like socks that 
requires a socks complient client (most popular clients have socks 
support). soccks is available in the ports/packages collection.

Second way is to set up specific application proxies. This way you need a 
specific application for each protocol you need to pass through the 
firewall. The added benefit is mainly caching, and better control. For 
some of those, look at the fwtk (also in the ports).

The third is indeed to do IP Masquerading. This is a bit tough, but can 
be set up with IPfilter.

> Does gated help?

No, gated is for routing which is not the point here.

> 
> c u Jo
> 
> 
> 
Nadav



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.91.970404160036.12019A-100000>