Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 10 Nov 1999 15:51:25 GMT
From:      Marty Cawthon <mrc@ChipChat.com>
To:        jimbean109@hotmail.com
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: can I use natd or is this even possible?
Message-ID:  <19991110155125K.mrc@ChipChat.com>
In-Reply-To: Your message of "Tue, 09 Nov 1999 17:41:18 PST" <19991110014119.63178.qmail@hotmail.com>
References:  <19991110014119.63178.qmail@hotmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
From: "Jim Bean" <jimbean109@hotmail.com>
jimbean109> I have a single (external) IP address with a FreeBSD box answering to 
jimbean109> (www.domain.com, ftp.domain.com, ma.domain.com) with an internal address of 
jimbean109> 10.1.1.1, I also have a WIN95 machine with an internal address of 10.1.1.2 
jimbean109> which I'd like to run a GUI FTP deamon from (with a name such as 
jimbean109> (ftp2.domain.com).  This would be seperate from the FreeBSD machine which 
jimbean109> would still take FTP requests at ftp.domain.com.  Basiclly I'm running to 
jimbean109> machines with internal addresses and one external address and would like 
jimbean109> both the take seperate requests from the outside.  I've looked at natd but 
jimbean109> that appears to be for redirecting ports only?  Is this possible to do?  How 
jimbean109> would I go about it?
jimbean109> 
jimbean109> 10.1.1.1 (& external address) FreeBSD  ftp.domain.com
jimbean109> 10.1.1.2                      WIN95    ftp2.domain.com

Short answer:
   not possible

Discussion:
  It seems that you want to access a server daemon on your Win95 machine from 
the Internet at large.  But you cannot do this because you have a 10. address
assigned to it.

  If I try to send a packet from my machine to your Win95 machine (10.1.1.2) 
this packet will not even make it past my router because 10. addresses
are not routed on the Internet. The packet will be dropped.

  If I send a packet from my machine to your external address on your FreeBSD machine,
how can I specify that this packet is really destined for an internal machine with
a 10. address?  The answer is: it cannot be done with any software that I know of.

  With NATD your 10. address on your Win95 machine will be translated by NATD to
the external address of your FreeBSD machine (or a pool of legal addresses, depending
upon configuration).  NATD then keeps track of which connections/packets are coming
and going for FreeBSD and which are coming/going for the 10. (Win95) machine.

  Summary: You cannot access the FTP daemon on your Win95 machine from outside your
private 10. network.  With NATD you can use an FTP client on your Win95 machine to
access an FTP server outside your private 10. network.

  References:  RFC 1918 "Address Allocation for Private Internets"

Marty Cawthon
ChipChat






To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19991110155125K.mrc>