From owner-freebsd-questions  Wed Mar  5 09:20:44 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id JAA28104
          for questions-outgoing; Wed, 5 Mar 1997 09:20:44 -0800 (PST)
Received: from gatekeeper.barcode.co.il (gatekeeper.barcode.co.il [192.116.93.17])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id JAA28099
          for <questions@freefall.freebsd.org>; Wed, 5 Mar 1997 09:20:37 -0800 (PST)
Received: (from nadav@localhost) by gatekeeper.barcode.co.il (8.7.5/8.6.12) id TAA27385; Wed, 5 Mar 1997 19:20:09 +0200 (IST)
Date: Wed, 5 Mar 1997 19:20:09 +0200 (IST)
From: Nadav Eiron <nadav@barcode.co.il>
To: Chris Shenton <cshenton@it.hq.nasa.gov>
cc: Doug White <dwhite@gdi.uoregon.edu>, questions@freefall.freebsd.org
Subject: Re: Question: NAT?
In-Reply-To: <199703051538.PAA10101@wirehead.it.hq.nasa.gov>
Message-ID: <Pine.BSF.3.91.970305190512.27323A-100000@gatekeeper.barcode.co.il>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk



On Wed, 5 Mar 1997, Chris Shenton wrote:

> Doug said:
> 
>     Take a peek at IPFilter, or newer versions of the ppp included with
>     FreeBSD include an -alias option that does the necessary translations.
> 
> I did, but couldn't find info -- no man page info about "alias" in ppp
> nor pppd pages; which one were you meaning here?  I also didn't find
> any man page on "ipfilter" :-(

Did you install ipfilter? After you do, do man -k ipnat and it'll give 
you plenty of info.

> 
> I'm running 2.1.7-RELEASE and just cvsup'ed the ports collection: I
> don't find ppp, pppd, or ipfilter there. 

ppp and pppd are part of FreeBSD itself. IPfilter can be compiled pretty 
easily from the standard sources. Take a look at:
http://cheops.anu.edu.au/~avalon/

> 
> Thanks.
> 
> PS: any comparisons on ipfilter vs. ipfw for a newbie to both (but
>     not networking in general)? I know this provoked a bit of a heated
>     debate here a while back: I am looking mainly for NAT. Just curious
>     because I do see an /etc/rc.firewall which uses ipfw, not ipfilter.
> 
For your purposes ipfw simply doesn't do the job. It does not provide NAT 
facilities. IPfilter does. I guess that makes the choice easier for you. 
I used to use IPfilter in 2.1.0R days and when I've moved to 2.1.5 I 
changed to ipfw, but I don't do NAT.

Nadav