Date: Wed, 2 Nov 2005 22:54:45 -0600 From: "Matthew D. Fuller" <fullermd@over-yonder.net> To: Charles Swiger <cswiger@mac.com> Cc: freebsd-net@freebsd.org, Peter Gregorc <peter@paranoid-zine.com> Subject: Re: Re[2]: nat exclusion? Message-ID: <20051103045445.GO1367@over-yonder.net> In-Reply-To: <BF22DFA4-4C80-4C02-A34D-E173064550B8@mac.com> References: <502337639.20051102220924@paranoid-zine.com> <2C66C948-04D0-4576-A158-992AAE5BECB8@mac.com> <273200033.20051102224545@paranoid-zine.com> <BF22DFA4-4C80-4C02-A34D-E173064550B8@mac.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Nov 02, 2005 at 04:55:32PM -0500 I heard the voice of Charles Swiger, and lo! it spake thus: > On Nov 2, 2005, at 4:45 PM, Peter Gregorc wrote: > >I've got 86.61.75.240/30 > >.241 is for BSD > >.242 for WS1 > >.243 broadcast > >So two are usable for outside usage, if NAT is disabled. > > Sure, but normally, either .1 or .2 of a /30 subnet (ie, your .241 > or .242) is the externally-connected router of your ISP. A few of > the better ISP's will support switching their devices from being a > router to acting like a bridge, thus requiring you to provide a > dual- homed machine yourself. Presumably he's using the BSD box as the router (PPPoE). You can get away with a single NIC just fine; I go through PPPoE with the single NIC in my old 486 router, and forward ports internally. You want "nat unregistered_only yes" in the ppp.conf so it only NAT's private IP's and leaves public ones alone. -- Matthew Fuller (MF4839) | fullermd@over-yonder.net Systems/Network Administrator | http://www.over-yonder.net/~fullermd/ On the Internet, nobody can hear you scream.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051103045445.GO1367>