Date: Fri, 02 Feb 2001 11:27:05 -0700 From: Wes Peters <wes@softweyr.com> To: cgaylord@vt.edu Cc: freebsd-net@freebsd.org Subject: Re: (fwd) Re: FreeBSD ip masq, ip aliasing Message-ID: <3A7AFBF9.A2C7732F@softweyr.com> References: <20010202151413.7756BFD@cgaylord.async.vt.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
cgaylord@vt.edu wrote:
>
> I recently posted this to comp.unix.bsd.misc and thought I'd go
> ahead and air this idea here. I'd appreciate any criticism,
> constructive or otherwise, this group would care to heap upon me.
>
> Thanks.
> Clark
>
> John M Cherko wrote:
> > I am confused as to how to accomplish ip aliasing/ip masqing (I
> > believe they are the same) on a FreeBSD system. I currently run Linux 2.2
> > now and have stuck with it because I know how to run ip masqing on it.
> > I have been wanting to switch over to a BSD, mainly FreeBSD because of the
>
> The way it works is via BSD's "divert" sockets. You have ipfw (or
> ipfirewall, if you like) divert traffic to natd. It is all spelled out
> very nicely in the natd man page. The other firewall config is done via
> ipfw. You will likely want to hack rc.firewall to suit your needs; this
> is a very readable script, so mods are pretty straight-forward. The
> SIMPLE method may work ok for you, though; read the script and see. I
> am working on a way to do a larger class of firewalls via rc.conf
> variables, but that still needs some work.
>
> man natd
> man ipfw
> man divert
Well said. Unfortunately, you didn't include Mr. Cherko's email so I
cannot reply to him as well. You can also accomplish this using ipfilter
and ipnat. Some of us prefer ipfilter to ipfw, and ipfilter is available
on other BSD systems as well.
--
"Where am I, and what am I doing in this handbasket?"
Wes Peters Softweyr LLC
wes@softweyr.com http://softweyr.com/
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A7AFBF9.A2C7732F>