From owner-freebsd-questions@FreeBSD.ORG Wed Jul 16 05:13:43 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E88BB37B401 for ; Wed, 16 Jul 2003 05:13:43 -0700 (PDT) Received: from smmcroute.smmc.qld.edu.au (dsl-210-15-201-90.QLD.netspace.net.au [210.15.201.90]) by mx1.FreeBSD.org (Postfix) with ESMTP id 36CDD43FA3 for ; Wed, 16 Jul 2003 05:13:42 -0700 (PDT) (envelope-from keith@smmc.qld.edu.au) Received: (qmail 63578 invoked by uid 89); 16 Jul 2003 12:13:31 -0000 Received: from unknown (HELO smmc.qld.edu.au) (127.0.0.1) by 127.0.0.1 with SMTP; 16 Jul 2003 12:13:31 -0000 Received: from 10.0.0.2 (proxying for 10.0.1.128) (SquirrelMail authenticated user keith) by localhost.smmc.qld.edu.au with HTTP; Wed, 16 Jul 2003 22:13:31 +1000 (EST) Message-ID: <4402.10.0.0.2.1058357611.squirrel@localhost.smmc.qld.edu.au> Date: Wed, 16 Jul 2003 22:13:31 +1000 (EST) From: To: "Free bsd " X-Priority: 3 Importance: Normal X-Mailer: SquirrelMail (version 1.2.11) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Subject: FBSD gateway/firewall with squid <-will it let request in?? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jul 2003 12:13:44 -0000 Hi all, shooting blind here cause I trouble shoot this (although I am remote from the systems in question) 203.111.111.216/29 <-NAT-> 10.0.0.1 10.0.0.2 Internet<------>FBSD (ipfilter/ipnat squid) <------> www/mail server All "live ips" are alias to external interface of FBSD they NAT to internals. I have never had squid proxy on a gateway like this. Would squid by default (I have changed very little in squid.conf) interfere with externally incoming traffic being Natted to the inside server? Will it block? I know this is FBSD not SQUID but maybe it is an ipf hassle otherwise. Thanks if you can help Keith