Very Computer

does anyone know of daemon code to provide Network Address Translation for a non-compliant IP
addressed network? can run on either BSD or SYSV (preferrably SunOS)

Quote:>does anyone know of daemon code to provide Network Address Translation

        One approach is to put the network behind a firewall that
only has one (legal) connection to the Internet. Other approaches
involve expensive routers; I think several router makers do some form
of address translation but it doesn't work very well. Remember
that some protocols on TOP of TCP encode addresses in them: FTP is
just one example. Dual-homed bastion firewalls effectively do the
translation but don't give you direct connectivity.
        If direct connectivity is your goal, The Correct Answer is
to fix the addresses -- otherwise the network will just keep growing
and sooner or later it'll come back to haunt you.

mjr.

If you are looking for a commercial solution, the JANUS Firewall Server
from NetPartners provides this functionality.  This hardware device acts
as a security firewall to protect your internal company network from
unauthorized Internet intruders.  It does this by providing a full (and fully
transparent) set of application level proxies.  A nice feature of this
approach is that all IP packets leaving the firewall are translated to have
only the IP source address of the firewall's external interface.

for a human response.

--
Phil Trubey                 |
NetPartners                 | Providing Internet products and services.

Phone:  714-759-1641        |

I recently released ip-masquerading software for Linux, hopefully it
will be accepted in the standard source.

It enables you to do precisly that (local non-official addresses mapped
through ONE host address). This host than does all the talking. Keep
in mind however that this is still firewall code, so connections coming
from the outside world will *not* be routed to the local net. Only
connections which are initiated from a local machine will.
 --> This gives problems for FTP, i know... :(
Another restriction is that it only works for UDP and TCP, where
the ports can be remapped, other packets (e.g. ICMP) are discarded.

--
    Met vriendelijke groet,
        Pauline Middelink
+------------------------------+-------------------------------------+

| Boterkorfhoek 34             | zakelijk : 053-776184               |
| 7546 JA  Enschede, Holland   | prive    : 053-771147               |
+------------------------------+-------------------------------------+

I assume this is ftp, irc etc aware for remapping ports which are specified
in data. Now to the main point of this reply. I'm looking for about 10
people to test a Linux masquerade firewall thats a GPL'd freebie someone has
written, before it goes into the standard kernel code.

Alan
--
  ..-----------,,----------------------------,,----------------------------,,

 ``----------'`--[Anti Kibozing Signature]-'`----------------------------''
One two three: Kibo, Lawyer, Refugee :: Green card, Compaq come read me...