Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 23 Oct 1998 17:12:57 +1300
From:      "Dan Langille" <junkmale@xtra.co.nz>
To:        Loren Daniel Koss <loren@boingo.pciway.com>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: NATD & IPFW..
Message-ID:  <199810230412.RAA19188@cyclops.xtra.co.nz>
In-Reply-To: <Pine.BSF.3.95q.981022200219.209A-100000@boingo.pciway.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 22 Oct 98, at 20:13, Loren Daniel Koss wrote:

> Now, here's my new network topology:
> 
> 206.0.98.1 <-- Router
> |
> 206.0.98.10 <-- EP0
> 
> 192.168.1.1 <--EP1
> |
> |
> -------Rest of Network - All 192.168.1.x ---------
> 
> Okay, without doing much, machines cacn ping 206.0.98.10, 192.168.1.1, and
> other 192.168.1.x machines just fine.  The BSD box can get to the internet
> just fine, as well.
> 
> Question is how do I masquerade the 192.168.1.x network out to the world
> through the 206.0.98.10 address.

You really don't have to worry about it.  natd will take care of it for 
you.  See below for how to install that.

> Also, I run a webserver on one of the machines.  How is that going to work
> properly?  I host about 7 sites on it with seven unique addresses.  I was
> thinking of hosting them all on one address with different ports and
> somehow using NATD to route an address to the proper port on that machine.

You can use the redirect bit on natd.  It's quite easy.  I've done it.  
See http://www.freebsddiary.com/freebsd/http.htm because I think that's 
what you want.

> I also noticed when it boots it says "IP Filtering Enabled, Divert
> Disabled, logging disabled."  Is that normal?  I have the IPDIVERT option
> turned on in the kernal.

No, I don't think so.  Mine says Divert enabled.  It sounds like you 
haven't specified that diverting of packets is to be done.  See below.

> What I need:
> STEP BY STEP INSTRUCTION (ie natd -n ep0 then ipfw blah blah blah).

It's close to step by step.  The following should help.  The information 
is there but in several sites.

http://www.freebsddiary.com/freebsd/natd.htm
http://www.freebsddiary.com/freebsd/dns.htm
http://www.freebsddiary.com/freebsd/filtering.htm
http://www.freebsddiary.com/freebsd/natd2.htm

Of prime importance is your natd setup.  Be sure to read the Running natd 
section at the bottom of http://www.freebsd.org/cgi/man.cgi?natd (also 
known as "man natd").

--
Dan Langille
DVL Software Limited
The FreeBSD Diary - my [mis]adventures
http://www.FreeBSDDiary.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199810230412.RAA19188>