From owner-freebsd-security@FreeBSD.ORG  Sun May 11 15:15:44 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7B8CB37B401
	for <freebsd-security@freebsd.org>;
	Sun, 11 May 2003 15:15:44 -0700 (PDT)
Received: from mail.schatti.ch (zux183-070.adsl.green.ch [80.254.183.70])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B8C4F43FA3
	for <freebsd-security@freebsd.org>;
	Sun, 11 May 2003 15:15:42 -0700 (PDT)
	(envelope-from freebsdquestions@schatti.ch)
Received: from localhost (localhost [127.0.0.1])
  (uid 1002)
  by mail.schatti.ch with local; Mon, 12 May 2003 00:19:29 +0200
From: freebsdquestions@schatti.ch
To: freebsd-security@freebsd.org
Date: Mon, 12 May 2003 00:19:29 +0200
Mime-Version: 1.0
Content-Type: text/plain; format=flowed; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Sender: freebsdquestions@schatti.ch
Message-ID: <courier.3EBECC71.0001143C@mail.schatti.ch>
Subject: 
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 11 May 2003 22:15:44 -0000

Hi all! 

Short question: could anyone point me to documents regarding topics:
jails! & nat & (ipfw|ip tables) - I'm in process to build a new system...
Planned layout: 

NET---router/nat-----gateway:freebsd5.x/nat--------inner net
                      |    |    |
                      |    |    L- apache/php  (lo_alias1)
                      |    L------ mail server (lo_alias2)
                      L----------- djbdns      (lo_alias3) 

Any hints, do's and dont's ? what about natd/ipnat ? which is better for 
dynamic rules ? Especially: how to manage that in conjunction with multiple 
jails ?? 

TIA, Slim