Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 13 Aug 1995 18:42:46 +0930 (CST)
From:      Michael Smith <msmith@atrad.adelaide.edu.au>
To:        gary@palmer.demon.co.uk (Gary Palmer)
Cc:        terry@cs.weber.edu, paul@freebsd.org, questions@freebsd.org
Subject:   Re: Netware gateway.
Message-ID:  <199508130912.SAA18403@genesis.atrad.adelaide.edu.au>
In-Reply-To: <2010.808247165@palmer.demon.co.uk> from "Gary Palmer" at Aug 12, 95 06:06:05 pm

next in thread | previous in thread | raw e-mail | index | archive | help
Gary Palmer stands accused of saying:
> >> There's a problem. I need to use fake ip addresses on the
> >> internal side of the FreeBSD box since there's only a single valid ip
> >> address allocated. I've thought about using socks on the FreeBSD box so that
> >> the fake internal ip addresses are never seen. Basically, I'm not sure this
> >> will work with Novix and I'm touting for experiences of solving this
> >> setup in general, i.e. connecting Netware networks to the internet across
> >> a dial-up connection where you've only had a single ip address allocated.
> 
> >I don't really understand this is a requirement.
> 
> Demon Internet don't allow you to have multiple IP's routed through
> the same link unless you buy an entire class C off them (yes, I know
> that they are free, but you have to pay DIS to route it to you, etc,
> etc), and I seem to remember that they only do Class C rental as part
> of their leased line package now, although I could be mistaken (I
> haven't looked at their price structure for a while now).
> 
> So either the FreeBSD box would have to do address re-writing, or
> you're up a gum tree without a paddle (or you're back to the origional
> problem with netware-over-modem).

Nope.  Run winsock stacks doing native IP over ethernet alongside the 
IPX/whatever stack, put the FreeBSD box on the ethernet with the serial 
link out; put all of the internal systems on a fake IP net, disable
routing on the FreeBSD box, and run a socks proxy on it.

Presto; instant firewall, easy net access.  You can run all your mail
on the FreeBSD box using pop or imap, and with appropriate clients
you can still talk out.  You can put the CERN proxy httpd on the 
FreeBSD system as well, and take advantage of an organisation-wide
web cache.

This is easy to set up, and a very popular use for FreeBSD systems around 
here.

> Gary

-- 
]] Mike Smith, Software Engineer        msmith@atrad.adelaide.edu.au    [[
]] Genesis Software                     genesis@atrad.adelaide.edu.au   [[
]] High-speed data acquisition and                                      [[
]] realtime instrument control          (ph/fax) +61-8-267-3039         [[
]] My car has "demand start" - Terry Lambert                            [[



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199508130912.SAA18403>