Date: Tue, 4 Jan 2000 13:16:02 -0600 (CST) From: Gene Harris <zeus@tetronsoftware.com> To: "James A. Mutter" <jmutter@commercialmovers.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: IPNAT - One more time - [More Info This Time] Message-ID: <Pine.BSF.4.10.10001041306340.3239-100000@tetron02.tetronsoftware.com> In-Reply-To: <38724221.E4B4C1E3@commercialmovers.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Your pipeline 130 was doing your NAT translation and routing. So the interface was ethernet on your network side, and ISDN or frame relay on the WAN side. The NAT translation takes place between interfaces inside your P130. For your FreeBSD box to do the same, you need a network card with a cross over cable to your P130, and a network card to your internal net. NAT and routing will take place between your two NIC's. What you seem to be doing is trying to run your internal network and your external network on the same physical network cables. This can be done, but it can open you to a lot of network traffic, and if you ever make a configuration error, you can open your internal network to some nasty things, via an invasion of your P130. So, my advice is to isolate your internal network from your pipeline using separate hardware. Even the the P130 is acting as your firewall, you can do a lot more sophisticated things with your FreeBSD box for firewall and network protection. Gene On Tue, 4 Jan 2000, James A. Mutter wrote: > > > /etc/rc.conf > > > gateway_enable="YES" > > > tcp_extensions="YES" > > > firewall_enable="NO" > > > router="routed" > > > router_flags="-q" > > > ifconfig_pn0="inet 192.196.1.10 netmask 255.255.255.0" > > > ifconfig_pn0_alias0="inet 204.107.254.XXX netmask 255.255.255.XXX" > > > defaultrouter="204.107.254.XXX" <- This is not the address of > > > 'pn0_alias0' - but rather the address of the router. > > > > > > > I see one BIG issue here. Where's the second NIC?????? You > > ain't gonna do this unless you have another interface, like > > ppp or at least a 2nd NIC. > > I thought that alias on pn0 would take care of that problem. Traffic > goes in on pn0:0 (192.196.1.10) and leaves on pn0:1 (204.107.254.XXX) - > Is this incorrect? > > Please let me know. > > Thanks, > Jim > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.10001041306340.3239-100000>