Very Computer

by **sdrumm** » Sat, 17 Mar 2001 10:35:03

I'm planning on setting up the Linux box to act as a gateway for a private

As I understand it from skimming the HOW-TOs, IP-Chains sets the firewall
rules and can also handle masquerading.
IP-Masquerade is for masquerading only.

If I install IP-Chains, is there any reason (read: functionality /
performance benefit) to install IP-Masquerade?

Thanks!

by **Manfred Bart** » Sat, 17 Mar 2001 10:40:47

> I'm planning on setting up the Linux box to act as a gateway for a

> ISP.

> As I understand it from skimming the HOW-TOs, IP-Chains sets the
> firewall rules and can also handle masquerading.
> IP-Masquerade is for masquerading only.

And ipchains provides an interface to it.

Quote:> If I install IP-Chains, is there any reason (read: functionality /
> performance benefit) to install IP-Masquerade?

The purpose of IP-Masquerade is to share a single public IP address
among several hosts on your private network. If you have enough
public addresses or if hosts on your LAN don't need to communicate
with the Internet then you don't need it.

When used correctly, IP-Masquerade can be a security feature because
there is no path to the masqueraded hosts from the Internet.

--
Manfred
---------------------------------------------------------------
ipchainsLogAnalyzer, NetCalc, whois at: <http://logi.cc/linux/>

Very Computer

IP-Chains vs. IP-Masquerade

IP-Chains vs. IP-Masquerade

IP-Chains vs. IP-Masquerade