From owner-freebsd-net@FreeBSD.ORG  Thu Apr  7 16:25:14 2005
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7DE5616A4CE
	for <freebsd-net@freebsd.org>; Thu,  7 Apr 2005 16:25:14 +0000 (GMT)
Received: from thor-new.fsklaw.com (adsl-64-174-116-34.dsl.lsan03.pacbell.net
	[64.174.116.34])
	by mx1.FreeBSD.org (Postfix) with ESMTP id E8B3D43D48
	for <freebsd-net@freebsd.org>; Thu,  7 Apr 2005 16:25:13 +0000 (GMT)
	(envelope-from tms3@fsklaw.com)
Received: from  [192.168.62.181] by thor-new.fsklaw.com via SMTP
	(ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.7.6));
	Thu, 7 Apr 2005 09:26:16 -0700
Message-ID: <425550E6.3080005@fsklaw.com>
Date: Thu, 07 Apr 2005 08:25:26 -0700
From: Tom Skeren <tms3@fsklaw.com>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.5) Gecko/20041217
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: John Mok <jmok@attglobal.net>
References: <42555C87.7030700@attglobal.net>
In-Reply-To: <42555C87.7030700@attglobal.net>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-ArGoMail-Authenticated: tms3
cc: freebsd-net@freebsd.org
Subject: Re: FreeBSD Firewall + NAT Traversal + IPsec
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Apr 2005 16:25:14 -0000

John Mok wrote:

> Hi,
>
> I'm new to FreeBSD. Is it possible make a FreeBSD box with firewall + 
> NAT, such that client PC(s) from the NATed internal network could 
> connect to a VPN gateway on the Internet :-
>
>  client PC ----- FreeBSD Firewall + NAT ---- Internet ---- IPsec VPN 
> gateway
> 192.168.x.x/16                                              (e.g. 
> Checkpoint FW-1)
> (VPN client)
>
> I hope someone could help to advise what software is required on the 
> FreeBSD box to NAT traversal work and where to get the HOWTO(s)?

Should be no problem.

<http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-natd.html>

>
> Thanks a lot.
>
> John Mok
>
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
>