From owner-freebsd-questions@FreeBSD.ORG Thu Feb 16 00:16:23 2006 Return-Path: X-Original-To: questions@freebsd.org Delivered-To: freebsd-questions@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 30C0716A420 for ; Thu, 16 Feb 2006 00:16:23 +0000 (GMT) (envelope-from infofarmer@gmail.com) Received: from zproxy.gmail.com (zproxy.gmail.com [64.233.162.198]) by mx1.FreeBSD.org (Postfix) with ESMTP id B3C7A43D46 for ; Thu, 16 Feb 2006 00:16:22 +0000 (GMT) (envelope-from infofarmer@gmail.com) Received: by zproxy.gmail.com with SMTP id z3so51357nzf for ; Wed, 15 Feb 2006 16:16:21 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=nfVUaCmxXJhzp8B831YTSg6kO8pyGoiPR4KgEDhJX1Vhyqjxt2z5eYERYejqHS05Lg5wcYPEsmhF8heAcOY/faKKSaRVhudEcLonF+Zf4AcpcfacnnkfjBgBTbkcKGBZYgC4HayUhOO/yv/yKYxBLvt1uC7EhZXX0VpIIenOzQI= Received: by 10.36.251.68 with SMTP id y68mr456505nzh; Wed, 15 Feb 2006 16:16:21 -0800 (PST) Received: by 10.37.20.11 with HTTP; Wed, 15 Feb 2006 16:16:21 -0800 (PST) Message-ID: Date: Thu, 16 Feb 2006 03:16:21 +0300 From: Andrew Pantyukhin To: bob@a1poweruser.com In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: Cc: FreeBSD Questions Subject: Re: natd with several alias IPs X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Feb 2006 00:16:23 -0000 On 2/16/06, bob@a1poweruser.com wrote: > I am not sure just what you are asking about. > > Are you saying that you have 4 static public ip address assigned to > you by your ISP and you want to round robin those 4 in the NATing > process to your hundreds of LAN users? > > If that's what you are after then any of FreeBSD's 3 built in > firewall can do that by how you code the NAT statements. Read the > handbook firewall ipfilter section for details. There is no special > tricks or need for several NATed process. I'm quite aware of the fact that both pf and ipf have mature nat frameworks. The question is, how to do that with natd (and ipfw). Could you be so kind and throw an example of a round-robin setup without several natd processes, 'cuz I can hardly imagine that?