*BSD News Article 90267


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!news.ecn.uoknor.edu!feed1.news.erols.com!cpk-news-hub1.bbnplanet.com!news.bbnplanet.com!newsfeed.internetmci.com!news.easystreet.com!not-for-mail
From: tedm@agora.rdrop.com (Ted Mittelstaedt)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: IP Masquerading possible? Perhaps transparent proxies?
Date: 4 Mar 1997 09:17:43 GMT
Organization: Cool Dudes Inc.
Lines: 30
Message-ID: <5fgpbn$b7d$4@easystreet03>
References: <5f637n$n93@news.gvsu.edu>
NNTP-Posting-Host: sunnet.portsoft.com
X-Newsreader: WinVN 0.92.6+
Xref: euryale.cc.adfa.oz.au comp.unix.bsd.freebsd.misc:36497

In article <5f637n$n93@news.gvsu.edu>, behrensm@river.it.gvsu.edu (Matt Behrens) says:
>
>Hi all, I'm torn. :)
>

>
>Is there ANY way (perhaps version 3.0 of FreeBSD?) that I can get FreeBSD
>to do a functionally equivalent thing, both here and at work. Ideally, I'd

IP masquerading is part of the kernel changes in version 2.2, install
the ipfw program and the /etc/sysconfig has entries on how to do it.

FOr version 2.1.7 and lower, you have two choices:  if you just need
masquerading behind a ppp interface, Charles Mott has a set of patches
and software up on his web site to do it at:

http://www.srv.net/~cmott/alias.html

 otherwise if you need
network interface-to-interface translation you have to recompile the
kernel and add it in using software up on

http://cheops.anu.edu.au/~avalon/ip-filter.html

I'm facing the same problem myself, and I even tried out ipfilter, but
the ruleset language is awful.  Also, I'd be concerned about putting
a lot of work into it and not being able to carry it forward to newer
versions of FreeBSD.  I'm currently waiting for 2.2 to go gold.

Ted