IP Masquerading with NetBSD 1.3.3?

IP Masquerading with NetBSD 1.3.3?

Post by Peter W. Gstettne » Wed, 03 Mar 1999 04:00:00



That's what I want to do...

Possible?
How?
Kernel reconfiguration required?
Need all your help!

Peter.

 
 
 

IP Masquerading with NetBSD 1.3.3?

Post by Hubert Feyre » Wed, 03 Mar 1999 04:00:00



Quote:> Possible?

Sure

Quote:> How?

``IPNAT''
man ipf, and follow the instructions and links to other
pages there. Also there's an IPFilter-Homepage somewhere...
Try asking altavista.

Quote:> Kernel reconfiguration required?

Only to enable things

 - Hubert

--


 
 
 

IP Masquerading with NetBSD 1.3.3?

Post by Emmanuel Dreyf » Wed, 03 Mar 1999 04:00:00



Quote:> That's what I want to do...
> Possible?

Yes

Quote:> How?

have a look to man ipnat.

Quote:> Kernel reconfiguration required?

No

Quote:> Need all your help!

This is my ipnat.conf, maybe it will help you.

map ae1 10.0.2.0/24 -> 157.159.41.34/32 portmap tcp/udp 1025:65535
map ae1 10.0.8.0/24 -> 157.159.41.34/32 portmap tcp/udp 1025:65535
map ae1 10.0.4.0/24 -> 157.159.41.34/32 portmap tcp/udp 1025:65535
rdr ae1 0.0.0.0/0 port 6666 -> 10.0.2.25 port 6667 tcp
rdr ae1 0.0.0.0/0 port 10119 -> 10.0.2.25 port 119 tcp
rdr ae1 0.0.0.0/0 port 1119 -> 10.0.2.25 port 119 tcp
rdr ae1 0.0.0.0/0 port 119 -> 10.0.2.25 port 119 tcp
rdr ae1 0.0.0.0/0 port 2121 -> 157.159.41.34 port 21 tcp
rdr ae1 0.0.0.0/0 port 2323 -> 157.159.41.34 port 23 tcp
rdr ae1 0.0.0.0/0 port 8080 -> 157.159.41.34 port 80 tcp
rdr ae1 0.0.0.0/0 port 10110 -> 157.159.41.34 port 110 tcp
rdr ae1 0.0.0.0/0 port 10548 -> 157.159.41.34 port 548 tcp

I've got 3 ethernet boards. My private network is connected to ae2 and
ae0. ae1 leads to the internet. The more interesting line for you is the
firest line: It should be enough if you have 2 ethernet boards and only
one subnet to masquerade.

A rdr line allow you to redirect a port another port, possibly on an
inner machine.

--
Emmanuel Dreyfus
Ce message est post sur un serveur de news experimental.

 
 
 

IP Masquerading with NetBSD 1.3.3?

Post by Nathan J. Willia » Wed, 03 Mar 1999 04:00:00



Quote:> Possible?

        Yes. But it's called NAT (Network Address Translation), not
masquerading.

Quote:> How?

        See the ipnat(8) man page, the examples in
/usr/share/examples/ipf (esepcially BASIC.NAT), and the NAT FAQ linked
from http://www.netbsd.org/Documentation/network.

Quote:> Kernel reconfiguration required?

        Yes. As described by the ipnat(8) man page, you'll need to
enable the GATEWAY and PFIL_HOOKS options in your kernel.

        - Nathan

 
 
 

1. IP Masquerading for NetBSD

Is anyone aware of work being done to allow NetBSD do IP masquerading, aka
network address translation?  I currently have a private net at home, with
a Sun 4/260 running NetBSD, a Mac, and a PC that runs linux with a modem
line to the outside world. Linux acts as a NATD pretty well, but  I'd
rather put the modem on the Sun, as the PC is a laptop and I like to take
it with me (not much chance for taking the Sun with me; but if I could get
it to have the modem, I could telnet directly to it rather than have to go
through the PC).  

Chris Austin-Lane

2. AMD k6-2 in a server.

3. IP for masqueraded net other than masquerading host IP

4. OpenGL for Solaris ?

5. Can NetBSD do IP masquerading?

6. Trying to install to a Sony Viao 220

7. NetBSD Box as gateway/ IP Masquerading?

8. Q: motd

9. IP Masquerading works, but does not masquerade from within the local network

10. IP MASQuerading NOT Masquerading?

11. Backup scripts, IP firewalling and IP masquerading

12. IP NAT and IP Masquerading