Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 Sep 1998 00:04:39 -0400
From:      Drew Baxter <netmonger@genesis.ispace.com>
To:        Eugeny Kuzakov <kev@lab321.ru>
Cc:        Darren Reed <darrenr@reed.wattle.id.au>, hackers@FreeBSD.ORG
Subject:   Re: Packet/traffic shapper ?
Message-ID:  <199809230405.AAA11679@Loki.orland.u91.k12.me.us>
In-Reply-To: <Pine.BSF.4.02.9809231040210.19614-100000@lab321.ru>
References:  <199809230325.XAA11642@Loki.orland.u91.k12.me.us>

next in thread | previous in thread | raw e-mail | index | archive | help
I was referring to the IPFilter thing namely.. that caught my eye in the
kernel config script..  

Have you ever thought about using natd or gated? I think you may actually
find better results.

I can't remeber if gated can do NAT, but I remember I could do it with the
proxy option in the user-level PPP..

Any stuff I've done with that is at heatseeker.net.. Now we use Gated
because we got a block of 32..  But at the time we used User-Level PPP, and
I just had enable proxy and a few other pieces of config enabled.  Let me
know if you want further information..

At 11:00 AM 9/23/98 +0700, Eugeny Kuzakov wrote:
>On Tue, 22 Sep 1998, Drew Baxter wrote:
>
>> Yknow, that's a good question.. and I wish I knew the answer.. I haven't
>> tried it yet.  But I'm also only running 0804 as well.
>What load of ipnat ?
>On my server ipnat configuration dynamically changes after up/down ppp
>links. I have 2 dedicated lines (33600,pppd 2.3.5), 1 dialin line,
>1 ethernet card with 2 aliases.
>
>My shell script generates following ipnat config:
>
># just masquerade internal networks on ppp0...
>map ppp0 192.168.6.0/24  -> 62.76.128.34/32  proxy port 21 ftp/tcp  
>map ppp0 192.168.6.0/24  -> 62.76.128.34/32  portmap udp 40000:60000
>map ppp0 192.168.6.0/24  -> 62.76.128.34/32                         
>map ppp0 192.168.7.0/24  -> 62.76.128.34/32  proxy port 21 ftp/tcp  
>map ppp0 192.168.7.0/24  -> 62.76.128.34/32  portmap udp 40000:60000
>map ppp0 192.168.7.0/24  -> 62.76.128.34/32                         
>map ppp0 192.168.8.0/24  -> 62.76.128.34/32  proxy port 21 ftp/tcp  
>map ppp0 192.168.8.0/24  -> 62.76.128.34/32  portmap udp 40000:60000
>map ppp0 192.168.8.0/24  -> 62.76.128.34/32                         
>
>#below some lines for transparent proxing...3.0-980804 crashes w/o it even.
>rdr fxp0 62.76.129.65/32 port 80 -> 62.76.129.65 port 80 tcp        
>rdr fxp0 192.168.6.100/32 port 80 -> 192.168.6.100 port 80 tcp      
>rdr fxp0 192.168.6.201/32 port 80 -> 192.168.6.201 port 80 tcp      
>rdr fxp0 0.0.0.0/0 port 80 -> 62.76.129.65 port 8080 tcp            
>
>I have not any hardware problems because I uses this machine 2 years with
>2.1.0-R,2.1.7.1-R,2.2-980806.
>This it P100/64Mb/AIC7850 from Iwill(I don't remember motherboard id).
>3.0-0804 crashes on this machine IF I USES IPNAT. If not - works.
>
>> Any idea of an easy way to migrate to 0921?  Every time I upgrade I just
>> throw in another drive, install onto it, and move my stuff over.. I'd
>> imagine I can use CVSUP and do it quicker..
>> 
>> At 09:58 AM 9/23/98 +0700, Eugeny Kuzakov wrote:
>> >On Mon, 21 Sep 1998, Darren Reed wrote:
>> >
>> >
>> >Another question.
>> >
>> >Is ipfilter fixed in -current (3.0-beta) ?
>> >Last tryed 3.0-980804-SNAP...
>> >Just crashes while usage ipnat after some time.
>> >
>> >Now I uses 2.2-980806 with ipfilter 3.2.9 - no problems.
>> >I can not game with debug(and etc) on production server.
>> >
>> >--
>> >	Best wishes, Eugeny Kuzakov
>> >		Laboratory 321 ( Omsk, Russia )
>> >		kev@lab321.ru
>> >		ICQ#: 5885106
>> >
>> >
>> >
>> >To Unsubscribe: send mail to majordomo@FreeBSD.org
>> >with "unsubscribe freebsd-hackers" in the body of the message
>> 
>> ---
>> Drew "Droobie" Baxter
>> Network Admin/Professional Computer Nerd(TM)
>> OneEX: The OneNetwork Exchange 207-942-0275
>> http://www.droo.orland.me.us
>> 
>> 
>
>--
>	Best wishes, Eugeny Kuzakov
>		Laboratory 321 ( Omsk, Russia )
>		kev@lab321.ru
>		ICQ#: 5885106
>
>

---
Drew "Droobie" Baxter
Network Admin/Professional Computer Nerd(TM)
OneEX: The OneNetwork Exchange 207-942-0275
http://www.droo.orland.me.us


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199809230405.AAA11679>