Date: Tue, 15 Apr 2003 09:47:17 +0200 From: Robert Klein <RoKlein@roklein.de> To: "vizion communication" <vizion@ixpres.com>, "FreeBSD Stable" <freebsd-stable@FreeBSD.ORG> Subject: Re: NAT proxy concepts Message-ID: <200304150947.18334.RoKlein@roklein.de> In-Reply-To: <00e101c302fb$5f8b5700$15b55042@vizion2000.net> References: <00e101c302fb$5f8b5700$15b55042@vizion2000.net>
next in thread | previous in thread | raw e-mail | index | archive | help
How about IPSEC before NAT? Works wonders if you got non-overlapping RFC1918 networks on the ends. (Dunno if you can do it with FreeBSD, though. I set up a Linux solution quite a while ago) Robert On Tuesday 15 April 2003 05:01, vizion communication wrote: > Hi Guys > > I have been taking a close look at some networking > opportunities which are being frustrated by the limits which > are imposed by NAT. In particular the constraints impose by > the embargo on double NATing have an impact for a project I > am working on. Has anyone ever seen anything which I would > conceptually describe as a reverse NAT proxy? > > What I want to be able to do is to be able to create a > heirarchical tier of networks each one of which > communicates to the network above by using a modification of > NAT enjoying the capability of identifying a subnet number > and client. > > Does ayone know enough about this subject to point me in the > right > direction (which may be - forget about it there is no way it > can be done..:-) > > David > > > > > _______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to > "freebsd-stable-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200304150947.18334.RoKlein>