From owner-freebsd-net@FreeBSD.ORG  Thu Nov  3 04:54:50 2005
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8B07016A41F
	for <freebsd-net@freebsd.org>; Thu,  3 Nov 2005 04:54:50 +0000 (GMT)
	(envelope-from fullermd@over-yonder.net)
Received: from mail.localelinks.com (web.localelinks.com [65.170.254.5])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 38C4843D48
	for <freebsd-net@freebsd.org>; Thu,  3 Nov 2005 04:54:49 +0000 (GMT)
	(envelope-from fullermd@over-yonder.net)
Received: from mortis.over-yonder.net (adsl-12-34-209.jan.bellsouth.net
	[65.12.34.209])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by mail.localelinks.com (Postfix) with ESMTP id 2E5D02A
	for <freebsd-net@freebsd.org>; Wed,  2 Nov 2005 22:54:47 -0600 (CST)
Received: by mortis.over-yonder.net (Postfix, from userid 100)
	id 9296220FFE; Wed,  2 Nov 2005 22:54:45 -0600 (CST)
Date: Wed, 2 Nov 2005 22:54:45 -0600
From: "Matthew D. Fuller" <fullermd@over-yonder.net>
To: Charles Swiger <cswiger@mac.com>
Message-ID: <20051103045445.GO1367@over-yonder.net>
References: <502337639.20051102220924@paranoid-zine.com>
	<2C66C948-04D0-4576-A158-992AAE5BECB8@mac.com>
	<273200033.20051102224545@paranoid-zine.com>
	<BF22DFA4-4C80-4C02-A34D-E173064550B8@mac.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <BF22DFA4-4C80-4C02-A34D-E173064550B8@mac.com>
X-Editor: vi
X-OS: FreeBSD <http://www.freebsd.org/>
User-Agent: Mutt/1.5.9i-fullermd.2
Cc: freebsd-net@freebsd.org, Peter Gregorc <peter@paranoid-zine.com>
Subject: Re: Re[2]: nat exclusion?
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Nov 2005 04:54:50 -0000

On Wed, Nov 02, 2005 at 04:55:32PM -0500 I heard the voice of
Charles Swiger, and lo! it spake thus:
> On Nov 2, 2005, at 4:45 PM, Peter Gregorc wrote:
> >I've got 86.61.75.240/30
> >.241 is for BSD
> >.242 for WS1
> >.243 broadcast
> >So two are usable for outside usage, if NAT is disabled.
> 
> Sure, but normally, either .1 or .2 of a /30 subnet (ie, your .241
> or .242) is the externally-connected router of your ISP.  A few of
> the better ISP's will support switching their devices from being a
> router to acting like a bridge, thus requiring you to provide a
> dual- homed machine yourself.

Presumably he's using the BSD box as the router (PPPoE).  You can get
away with a single NIC just fine; I go through PPPoE with the single
NIC in my old 486 router, and forward ports internally.  You want "nat
unregistered_only yes" in the ppp.conf so it only NAT's private IP's
and leaves public ones alone.


-- 
Matthew Fuller     (MF4839)   |  fullermd@over-yonder.net
Systems/Network Administrator |  http://www.over-yonder.net/~fullermd/
           On the Internet, nobody can hear you scream.