From owner-freebsd-questions@FreeBSD.ORG Mon Feb 2 09:10:45 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5F37B16A4CE for ; Mon, 2 Feb 2004 09:10:45 -0800 (PST) Received: from dm3cnd.bell.ca (dm3cnd.bell.ca [206.47.0.146]) by mx1.FreeBSD.org (Postfix) with ESMTP id 75AEF43D2D for ; Mon, 2 Feb 2004 09:10:43 -0800 (PST) (envelope-from christopher.hollow@cgi.com) Received: from 142.122.115.62dm3cnd.bell.ca with ESMTP (Tumbleweed MMS SMTP Relay (MMS v5.0)); Mon, 02 Feb 2004 12:08:52 -0500 X-Server-Uuid: F7F6AAF0-A437-4F8E-BDFA-B18CACF73C6B Received: from cgi.com ([142.182.50.43]) by bt5c69.on.bell.ca (Netscape Messaging Server 4.15 BESI_Messaging_7 Apr 29 2002 13:22:02) with ESMTP id HSGVMQ00.HXH; Mon, 2 Feb 2004 12:08:50 -0500 Message-ID: <401E836C.6070307@cgi.com> Date: Mon, 02 Feb 2004 12:05:48 -0500 From: "HOLLOW, CHRISTOPHER" User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3.1) Gecko/20030425 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Barbish3@adelphia.net References: In-Reply-To: X-WSS-ID: 6C005BA9525548-01-01 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: Jorn Argelo cc: jan.muenther@nruns.com cc: questions@freebsd.org Subject: Re: proxies and firewalls X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Feb 2004 17:10:45 -0000 Proxy doesn't necessarily solve the privateIP-to-publicIP problem. NAT does: http://www.cablemodemhelp.com/proxy_vs_nat.htm Proxy is application level. NAT is address translation. HTH, Christopher Hollow JJB wrote: > Thanks for your reply, But I must be thick headed this morning, > because what you say below makes no sense to me. > I checked out the 2 referenced descriptions and they say > nothing about doing nat. > > I have Lan with private ip address that send packets to > public internet. How does an proxy server solve the private ip > address versus my public ip address problem? > > -----Original Message----- > From: owner-freebsd-questions@freebsd.org > [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of > jan.muenther@nruns.com > Sent: Monday, February 02, 2004 11:28 AM > To: JJB > Cc: Jorn Argelo; questions@freebsd.org > Subject: Re: proxies and firewalls > > >>Are you saying you know of an proxy server that does the nat >>function? > > > Actually, the point of having proxies is *not* having > to route. Your proxy machine should not be able to forward packets. > > Roughly, there a two different sub-groups: Circuit layer and > application > layer proxies, names should be self explaining. > > Example for an app layer gateway: > > Port: fwtk-2.1 > Path: /usr/ports/security/fwtk > Info: A toolkit used for building firewalls based on proxy > services > > > Example for a circuit level proxy: > > Port: nylon-1.2 > Path: /usr/ports/net/nylon > Info: A Unix SOCKS 4 and 5 proxy server > > > Socks5 is already app layer, too, IIRC. > > Cheers, J. > > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" >