Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 Apr 1999 18:11:34 -0600 (MDT)
From:      "Brendan Conoboy" <synk@swcp.com>
To:        jobaldwi@vt.edu (John Baldwin)
Cc:        freebsd-security@freebsd.org
Subject:   Re: IPFilter?
Message-ID:  <199904150011.SAA02517@kitsune.swcp.com>
In-Reply-To: <XFMail.990414034317.jobaldwi@vt.edu> from "John Baldwin" at Apr 14, 99 03:43:17 am

next in thread | previous in thread | raw e-mail | index | archive | help
> If you read the FAQ, and follow question 10.6. Does FreeBSD support NAT or
> Masquerading, it has a link to the natd manpage:
> http://www.freebsd.org/cgi/man.cgi?natd.
> 
> The section "Running NATD" gives step by step instructions on getting NAT up
> and running. For manpages in general, you can go to
> http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+3.1-RELEASE
> 
> I believe that you can use ipfw ('man ipfw' at the URL above) to do the same
> stuff as IPFilter.
>  
> John Baldwin <jobaldwi@vt.edu> -- http://members.freedomnet.com/~jbaldwin/

Hi John,

IP Filter comes with its own NAT, entirely separate from natd.  I prefer
IP filter to IPFW and imagine others might as well.  The original poster
is right though, the documentation is severely lacking.  I could write
something up if there's support (IE, somebody says "hey, do the groundwork
for this, I'll edit it, then throw it into the handbook"), but it wouldn't
be a complete documentary on ipfilter's features.  Perhaps this is still
better than what is available now.

Speaking of which, is anybody using ipfilter's ftp proxy successfully? I
have successful kernel panics, but the delight in this is fleeting.

-Brendan (synk@swcp.com)





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199904150011.SAA02517>