From owner-freebsd-questions@FreeBSD.ORG  Thu Jun  9 13:51:41 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8E5FB16A41C
	for <freebsd-questions@freebsd.org>;
	Thu,  9 Jun 2005 13:51:41 +0000 (GMT)
	(envelope-from keramida@ceid.upatras.gr)
Received: from kane.otenet.gr (kane.otenet.gr [195.170.0.95])
	by mx1.FreeBSD.org (Postfix) with ESMTP id D851E43D1D
	for <freebsd-questions@freebsd.org>;
	Thu,  9 Jun 2005 13:51:40 +0000 (GMT)
	(envelope-from keramida@ceid.upatras.gr)
Received: from orion.daedalusnetworks.priv (aris.bedc.ondsl.gr [62.103.39.226])
	by kane.otenet.gr (8.13.4/8.13.4/Debian-1) with SMTP id j59DpOgI000935; 
	Thu, 9 Jun 2005 16:51:25 +0300
Received: from orion.daedalusnetworks.priv (orion [127.0.0.1])
	by orion.daedalusnetworks.priv (8.13.4/8.13.4) with ESMTP id
	j59DpOJt067609; Thu, 9 Jun 2005 16:51:24 +0300 (EEST)
	(envelope-from keramida@ceid.upatras.gr)
Received: (from keramida@localhost)
	by orion.daedalusnetworks.priv (8.13.4/8.13.4/Submit) id j59DpO5n067608;
	Thu, 9 Jun 2005 16:51:24 +0300 (EEST)
	(envelope-from keramida@ceid.upatras.gr)
Date: Thu, 9 Jun 2005 16:51:24 +0300
From: Giorgos Keramidas <keramida@ceid.upatras.gr>
To: Bart Silverstrim <bsilver@chrononomicon.com>
Message-ID: <20050609135124.GA67573@orion.daedalusnetworks.priv>
References: <200506091145.j59BjAO6028202@clunix.cl.msu.edu>
	<200506090739.57892.lane@joeandlane.com>
	<5341204f22db0c3969e6d161e2fa5b0f@chrononomicon.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <5341204f22db0c3969e6d161e2fa5b0f@chrononomicon.com>
Cc: Lane <lane@joeandlane.com>, freebsd-questions@freebsd.org
Subject: Re: Very Dissapointed
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Jun 2005 13:51:41 -0000

On 2005-06-09 08:59, Bart Silverstrim <bsilver@chrononomicon.com> wrote:
>On Jun 9, 2005, at 8:39 AM, Lane wrote:
>> I don't know the concept "transparent proxy."  Hopefully you will
>> discover how that works as you build your firewall :)
>
> I think a transparent proxy is a proxy that your users didn't know
> they were going through...their machines use it without any manual
> configuration to point to it, and usually they don't have a choice.

Bridging may also help a lot there.  A machine that sits between two
networks and acts as a bridge can still filter traffic with IPFW, but it
has no IP address, so it's effectively "invisible" to the two sides of
the network.