Date: Mon, 8 Jul 2002 00:38:46 +0200 From: Andreas Ntaflos <ant@overclockers.at> To: Brossin Pierrick <pbrossin@wxp.homeip.net> Cc: freebsd-questions@freebsd.org Subject: Re: FreeBSD Server and Gateway Message-ID: <20020707223846.GA86670@Deadcell.ant> In-Reply-To: <001d01c225f5$28ec5f70$3200000a@nitrox> References: <001d01c225f5$28ec5f70$3200000a@nitrox>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Jul 07, 2002 at 10:30:40PM +0200, Brossin Pierrick wrote: > > I'd like to the same with FreeBSD for my local network. > I read those two howtos: > > http://www.schlacter.net:8500/public/FreeBSD-STABLE_and_IPFILTER.html > http://www.muine.org/~hoang/freenat.html Those are not bad howtos, in fact I think they both explain a lot, but it's a little overkill when you just need NAT and packet filtering. > I'm a little bit confused now.. :/ > > I'd like/need (for the beginning) at least (I think) a firewall, adsl > connection (pppoe) and NAT.. > I read the handbook: > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/pppoe.html [snip] > So why are the two other howtos treating (as I understand) ip masquerading > with IPFilter. > > As you may see, I'm really confused with IPFilter NAT IP Masquerading .... > Can someone take the time to explain or give the url of a page please.. I > can't find any ? > Generally, firewall is a term used to describe a box or router doing packet filtering. But almost always, NAT (network address translation) is provided by such a box, too. For packet filtering on FreeBSD, you may choose between IPFilter (ipf) and IPFW. IPFilter is contributed software and exists for other operating systems as well. IPFW is maintained and developed by the FreeBSD team. Both are very good and tested packet filters. I for myself use ipf. IP Masquerading == NAT. When you come from the Linux world, you may know NAT as IP Masquerading. Nothing wrong about that. NAT lets you have your internal LAN access the outside world with only one modem/cable modem/DSL connection/whatever. So you may use a firewall like ipf or IPFW in conjunction with NAT. Very common setup. This of course only works with a working connection to the internet or outside network. That's where you need your DSL connection set up correctly as you read in the handbook. To use IPFilter and its NAT facility ipnat, you should add these lines to your kernel configuration file (refer to the handbook about that topic): options IPFILTER options IPFILTER_LOG options IPFILTER_DEFAULT_BLOCK For IPFW and the NAT facility (natd): options IPFIREWALL options IPFIREWALL_VERBOSE options IPDIVERT For configureing rules for either package, consult the howtos you read, the handbook, the ipfilter website (http://www.ipfilter.org) and another nice howto for ipf: http://www.obfuscation.org/ipf/ So I hope this helped a bit on clearing up your confusion; And I hope I got everything right. HTH regards -- Andreas "ant" Ntaflos ant@overclockers.at Vienna, AUSTRIA To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020707223846.GA86670>