Date: Sun, 11 Feb 1996 16:07:35 +0000 () From: Pedro A M Vazquez <vazquez@IQM.Unicamp.BR> To: terry@lambert.org (Terry Lambert) Cc: ejs@bfd.com, ptroot@uswest.com, mc7953@mclink.it, questions@freebsd.org Subject: Re: IP Masquerading Message-ID: <199602111607.QAA26425@kalypso.iqm.unicamp.br> In-Reply-To: <199602052232.PAA00445@phaeton.artisoft.com> from "Terry Lambert" at Feb 5, 96 03:32:02 pm
next in thread | previous in thread | raw e-mail | index | archive | help
Terry Lambert said: > > > Actually, this isn't what he's talking about. The Linux implementation > > of IPFW includes some kernel mods that let a firewall translate > > (masquerade) "outgoing" requests, so that the packets have the firewall's > > IP address, and then retranslates the responses so that they get to the > > correct machine/port. > > It's called "proxy". > > It's not "masquerading" because you can't set up incoming FTP requests > (for instance) to one of the proxied machines. > > > The "correct BSD way" of implementing this would be to provide a packet > forwarding daemon that used the tunneling device to do it's thing. > It seems the latest ip-filter version (3.0.2) comes with NAT to make something like this ( http://coombs.anu.edu.au/ăvalon/ip-filter.html) Pedro
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199602111607.QAA26425>