Date: Fri, 6 Feb 1998 10:51:34 +0100 (CET) From: Michael.Bielicki@linkdesign.com To: jakob@teligent.se Cc: isp@FreeBSD.ORG Subject: Re: Natd and ipfw Message-ID: <199802060951.KAA13037@cyprus.vds.linkdesign.com> In-Reply-To: <Pine.BSF.3.96.980206093718.1082C-100000@datorn.teligent.se>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --]
We run for a couple of customers firewalls based among other stuff on
ipfw and natd. Depeding wheere you divert the packets in the firewall
rule list of ipfw natd is masquerading before or after filtering. Best
is before filtering but after the filtering for the interface of the
localmachine is done.
Regards
Michael
On 6 Feb, Jakob Alvermark shaped the electrons to say:
> Hello.
>
> I've got plans for setting up a firewall kind of machine. Ipfw to do
> filtering, and maybe natd to masquerade the internal network. I have a few
> questions about this though.
> Does ipfw and natd work good together? Are the addresses translated before
> or after ipfilter?
>
> /Jakob Alvermark
>
> -------------------------------------------------------
> Teligent AB, P.O. Box 213, S-149 23 Nynäshamn, Sweden
> Telephone +46-(0)8 520 660 00 * Fax +46-(0)8 520 193 36
> Direct +46-(0)8 520 660 32 * GSM +46-(0)70 792 16 57
>
--
Michael Bielicki
Buisnetco Telecom. Ltd. Link Design International Ltd.
13 Iras Str., Office 23 65, Cliff Rd, Tramore
Nicosia 1061, Cyprus http://www.linkdesign.com Co. Waterford, Ireland
Voice: +357-2-362 421 Voice: +353-51-386921
Fax: +357-2-362 429 We use FreeBSD Fax: +353-51-390880
[-- Attachment #2 --]
-----BEGIN PGP MESSAGE-----
Version: 2.6.3ia
Comment: Requires PGP version 2.6 or later.
iQCVAwUBNNrdKcneSpf+YTVhAQGmUAP8DvaNvwPKFxkVD0XcopdJykeG/gm/nmfn
mUXFo2HtOIY1YYw5QXMYNU65M6of0j2cwzqB8K8XmaUgF6rfMoWzPk7pHOSiUMYP
9T9eF4ZbBoclH32lyunSBQFK8OJIXeZcswHKdYWe8Ft8gWqZz38qCC+kYD4taqCO
r5FZRZ9q8/E=
=QCA3
-----END PGP MESSAGE-----
help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199802060951.KAA13037>