From owner-freebsd-questions Mon Dec 20 23:33:52 1999 Delivered-To: freebsd-questions@freebsd.org Received: from isy.liu.se (isy.liu.se [130.236.48.10]) by hub.freebsd.org (Postfix) with ESMTP id 2361514D85 for ; Mon, 20 Dec 1999 23:33:50 -0800 (PST) (envelope-from mj@isy.liu.se) Received: from lagrange.isy.liu.se (lagrange.isy.liu.se [130.236.49.127]) by isy.liu.se (8.9.1/8.9.1) with ESMTP id IAA28701; Tue, 21 Dec 1999 08:33:43 +0100 (MET) Message-ID: X-Mailer: XFMail 1.3 [p0] on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <001d01bf4b7d$209fc500$0200a8c0@web.saintspc.com.au> Date: Tue, 21 Dec 1999 08:33:42 +0100 (CET) From: Micke Josefsson To: David Uzzell Subject: RE: Multi IP's to one interface ie. tun0 Cc: freebsd-questions@FreeBSD.ORG Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On 21-Dec-99 David Uzzell wrote: > I have finally got my permanent connection going. > I have to setup the dialup as for a router which is fine but I need to be > able to serve www page and mail of the same machine. > How would I go about having multi ip's set for the one interface tun0 > > I think may have been answered before but can't seem to find it. If any one > can help or point me in the right direction. Thanks. Multiple ip's to one iface is done with natd (man natd, it's already there). This enables you to have several machines on a local net accessing the outside through one iface. The internal IP's are not visible from the outside. It does not let external machines distinguish your internal boxes though. E.g. you cannot ftp from the outside to your internal machines, only to your 'tun0-box'. There is nothing wrong in letting your 'tun0-box' also handle mail and have a http-server. Well, apart from some security issues. Many sites will have the http-server as a standalone box with everything firewalled except port 80. And let mail be handled by yet another firewalled box etc. But that's going a bit far into the subject... [Droning on] Unless you are paranoid or are very intrusion prone I would not bother with the firewalling stuff. And in any case one would have to know specifics about your situation before giving any other advice > FreeBSD the only > Real OS for Real Users Yes, yes, YES! /Micke ---------------------------------- Michael Josefsson, MSEE mj@isy.liu.se This message was sent by XFMail running on FreeBSD 3.1 ---------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message