From owner-freebsd-questions Mon Jul 8 04:03:14 1996 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id EAA25332 for questions-outgoing; Mon, 8 Jul 1996 04:03:14 -0700 (PDT) Received: from hustle.rahul.net (hustle.rahul.net [192.160.13.2]) by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id EAA25319 for ; Mon, 8 Jul 1996 04:03:06 -0700 (PDT) Received: by hustle.rahul.net with UUCP id AA08374 (5.67b8/IDA-1.5 for freebsd-questions@FreeBSD.org); Mon, 8 Jul 1996 04:03:03 -0700 Received: (from jim@localhost) by starshine (8.6.11/8.6.9) id BAA01833; Mon, 8 Jul 1996 01:46:25 -0700 From: Jim Dennis Message-Id: <199607080846.BAA01833@starshine> Subject: Re: IP masquerading possible? To: gar@ccnet.com (Adam Capell) Date: Mon, 8 Jul 1996 01:46:24 -0700 (PDT) Cc: freebsd-questions@FreeBSD.org In-Reply-To: <199607070053.RAA17971@ccnet4.ccnet.com> from "Adam Capell" at Jul 6, 96 05:49:53 pm X-Mailer: ELM [version 2.4 PL24] Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-questions@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk > > Is there a way to do IP masquerading under FreeBSD, so that I can > connect my network to the internet with only a single static IP > number? Look for Darren Reed's IPFilter package. It includes some code to provide NAT (Network Address Translation) -- which is another term for "masquerading." Please understand that some protocols (like talk) will not work properly through masquerading. Also, I suspect that NAT/masquerading produces a heavier load on the server than proxying (via SOCKS). I would suggest setting up proxying services -- deploying the clients for those -- and saving NAT for those services that can't run via SOCKS.