From owner-freebsd-security  Mon Nov 19 15:12:36 2001
Delivered-To: freebsd-security@freebsd.org
Received: from mail.in.nextra.sk (mail.in.nextra.sk [195.168.1.55])
	by hub.freebsd.org (Postfix) with SMTP id 88BED37B405
	for <freebsd-security@freebsd.org>; Mon, 19 Nov 2001 15:12:26 -0800 (PST)
Received: (qmail 14864 invoked by uid 85); 19 Nov 2001 23:12:16 -0000
Received: from egresh@noc.nextra.sk by mail.in.nextra.sk with qmail-scanner-0.96 (. Clean. Processed in 0.338312 secs); 19 Nov 2001 23:12:16 -0000
Received: from unknown (HELO noc.nextra.sk) (195.168.29.2)
  by mail.in.nextra.sk with SMTP; 19 Nov 2001 23:12:16 -0000
Message-ID: <3BF991E3.5483C14F@noc.nextra.sk>
Date: Tue, 20 Nov 2001 00:12:35 +0100
From: Tibor Gres <egresh@noc.nextra.sk>
Reply-To: egresh@noc.nextra.sk
Organization: Nextra s r.o.
X-Mailer: Mozilla 4.78 [en] (X11; U; Linux 2.2.12 i386)
X-Accept-Language: sk, en
MIME-Version: 1.0
To: Matiss Elsbergs <matiss@bkc.lv>
Cc: freebsd-security@freebsd.org
Subject: Re: IP Masquerade
References: <3BF65250.6E0B8F2E@softnet.ro> <001701c16f8e$4b02d300$0300a8c0@weird>
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

/etc/rc.conf:
..
natd_enable="YES"
natd_interface="fxp0" #what interface you have..
natd_flags="-s -u"
#-use_sockets | -s
#                 Allocate a socket(2) in order to establish an FTP data
or IRC
#                 DCC send connection.  This option uses more system
resources,
#                 but guarantees successful connections when port
numbers con-
#                 flict.
#-unregistered_only | -u
#                 Only alter outgoing packets with an unregistered
source
#                 address.  According to RFC 1918, unregistered source
#                 addresses are 10.0.0.0/8, 172.16.0.0/12 and
192.168.0.0/16.
firewall_script="/etc/rc.fw"
..

/etc/rc.fw:
..
add 200 divert natd ip from any to any via fxp0
..

man ipfw
man natd

Matiss Elsbergs wrote:
> 
> man natd
> ----- Original Message -----
> From: "Florin MANAILA" <florin.manaila@softnet.ro>
> To: "FreeBSD" <freebsd-security@FreeBSD.ORG>
> Sent: Saturday, November 17, 2001 2:04 PM
> Subject: IP Masquerade
> 
> > Hi all,
> > how do I make IP Masquerade on a FreeBSD whit ipfw for
> > 192.168.1.0/24 to be able to communicate with the global
> > Internet ?
> >
> >
> > Best regards,
> > Florin
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-security" in the body of the message
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message

-- 
Tibor Gres
e-mail: egresh@noc.nextra.sk

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message