From owner-freebsd-questions  Tue Jan  8  5:42:48 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from odyssey.apana.org.au (odyssey.apana.org.au [203.11.114.1])
	by hub.freebsd.org (Postfix) with ESMTP id C853E37B41C
	for <questions@freebsd.org>; Tue,  8 Jan 2002 05:42:40 -0800 (PST)
Received: from mushka.odyssey.apana.org.au (mushka.cx [203.11.114.10])
	by odyssey.apana.org.au (8.9.3/8.9.3) with ESMTP id VAA07462;
	Tue, 8 Jan 2002 21:42:24 +0800 (WST)
Message-Id: <5.1.0.14.2.20020108213659.00bbb3c0@Pop3.norton.antivirus>
X-Sender: dean/odyssey.apana.org.au@Pop3.norton.antivirus
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Tue, 08 Jan 2002 21:42:24 +0800
To: cjclark@alum.mit.edu
From: Dean Hollister <dean@odyssey.apana.org.au>
Subject: Re: ipfw question
Cc: questions@freebsd.org
In-Reply-To: <20020106110643.A237@gohan.cjclark.org>
References: <20020106113530.R85470-100000@odyssey.apana.org.au>
 <20020105184641.G204@gohan.cjclark.org>
 <20020106113530.R85470-100000@odyssey.apana.org.au>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

At 11:06 06/01/2002 -0800, Crist J. Clark wrote:

>NAT doesn't change the origin, it changes the desitnation. In this
>case, it would change the destination address to 2.2.2.2 rather than
>3.3.3.3.

Still couldn't get this working, so I tried nat, which does work. Only 
problem with it is that it can do some strange things with auth.

Does anyone know of a good package that will work with natd style 
redirection to enable the use of auth?

      HOST  1   <--LAN-->     HOST 2 <--PPP Links--> NETWORK
     10.0.1.1                10.0.1.2             10.0.2.0/24

Ie, any auth packets originating from host 1 for the network are redirected 
to host 2 and the auth data returned contains the network IP attempted, 
with host 1 as the source, instead of trying each IP on the network, host 2 
is used as an auth server.

Regards,

d.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message