From owner-freebsd-security Wed Apr 14 17:14: 2 1999 Delivered-To: freebsd-security@freebsd.org Received: from kitsune.swcp.com (swcp.com [198.59.115.2]) by hub.freebsd.org (Postfix) with ESMTP id 155D21525F for ; Wed, 14 Apr 1999 17:13:58 -0700 (PDT) (envelope-from synk@swcp.com) Received: (from synk@localhost) by kitsune.swcp.com (8.8.8/1.2.3) id SAA02517; Wed, 14 Apr 1999 18:11:34 -0600 (MDT) Message-Id: <199904150011.SAA02517@kitsune.swcp.com> Subject: Re: IPFilter? To: jobaldwi@vt.edu (John Baldwin) Date: Wed, 14 Apr 1999 18:11:34 -0600 (MDT) From: "Brendan Conoboy" Cc: freebsd-security@freebsd.org In-Reply-To: from "John Baldwin" at Apr 14, 99 03:43:17 am X-Mailer: ELM [version 2.4 PL25 PGP3 *ALPHA*] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > If you read the FAQ, and follow question 10.6. Does FreeBSD support NAT or > Masquerading, it has a link to the natd manpage: > http://www.freebsd.org/cgi/man.cgi?natd. > > The section "Running NATD" gives step by step instructions on getting NAT up > and running. For manpages in general, you can go to > http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+3.1-RELEASE > > I believe that you can use ipfw ('man ipfw' at the URL above) to do the same > stuff as IPFilter. > > John Baldwin -- http://members.freedomnet.com/~jbaldwin/ Hi John, IP Filter comes with its own NAT, entirely separate from natd. I prefer IP filter to IPFW and imagine others might as well. The original poster is right though, the documentation is severely lacking. I could write something up if there's support (IE, somebody says "hey, do the groundwork for this, I'll edit it, then throw it into the handbook"), but it wouldn't be a complete documentary on ipfilter's features. Perhaps this is still better than what is available now. Speaking of which, is anybody using ipfilter's ftp proxy successfully? I have successful kernel panics, but the delight in this is fleeting. -Brendan (synk@swcp.com) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message