Very Computer

That's what I want to do...

Possible?
How?
Kernel reconfiguration required?
Need all your help!

Peter.

Quote:> Possible?

Sure

Quote:> How?

``IPNAT''
man ipf, and follow the instructions and links to other
pages there. Also there's an IPFilter-Homepage somewhere...
Try asking altavista.

Quote:> Kernel reconfiguration required?

Only to enable things

 - Hubert

--

Quote:> That's what I want to do...
> Possible?

Yes

Quote:> How?

have a look to man ipnat.

Quote:> Kernel reconfiguration required?

No

Quote:> Need all your help!

This is my ipnat.conf, maybe it will help you.

map ae1 10.0.2.0/24 -> 157.159.41.34/32 portmap tcp/udp 1025:65535
map ae1 10.0.8.0/24 -> 157.159.41.34/32 portmap tcp/udp 1025:65535
map ae1 10.0.4.0/24 -> 157.159.41.34/32 portmap tcp/udp 1025:65535
rdr ae1 0.0.0.0/0 port 6666 -> 10.0.2.25 port 6667 tcp
rdr ae1 0.0.0.0/0 port 10119 -> 10.0.2.25 port 119 tcp
rdr ae1 0.0.0.0/0 port 1119 -> 10.0.2.25 port 119 tcp
rdr ae1 0.0.0.0/0 port 119 -> 10.0.2.25 port 119 tcp
rdr ae1 0.0.0.0/0 port 2121 -> 157.159.41.34 port 21 tcp
rdr ae1 0.0.0.0/0 port 2323 -> 157.159.41.34 port 23 tcp
rdr ae1 0.0.0.0/0 port 8080 -> 157.159.41.34 port 80 tcp
rdr ae1 0.0.0.0/0 port 10110 -> 157.159.41.34 port 110 tcp
rdr ae1 0.0.0.0/0 port 10548 -> 157.159.41.34 port 548 tcp

I've got 3 ethernet boards. My private network is connected to ae2 and
ae0. ae1 leads to the internet. The more interesting line for you is the
firest line: It should be enough if you have 2 ethernet boards and only
one subnet to masquerade.

A rdr line allow you to redirect a port another port, possibly on an
inner machine.

--
Emmanuel Dreyfus
Ce message est post sur un serveur de news experimental.

Quote:> Possible?

        Yes. But it's called NAT (Network Address Translation), not
masquerading.

Quote:> How?

        See the ipnat(8) man page, the examples in
/usr/share/examples/ipf (esepcially BASIC.NAT), and the NAT FAQ linked
from http://www.netbsd.org/Documentation/network.

Quote:> Kernel reconfiguration required?

        Yes. As described by the ipnat(8) man page, you'll need to
enable the GATEWAY and PFIL_HOOKS options in your kernel.

        - Nathan