On Wed, Jul 14, 1999 at 08:04:40AM +0200, Thilo Manske wrote:

> And what about DNS? You have to run a caching nameserver as DNS proxy
> since DNS requests (generally) run over UDP and that doesn't work with
> ipnat very well (if at all).

Do they? I could have sworn that DNS was TCP-based. In any event, I have a
friend who has just this sort of setup - NetBSD on the firewall, and a Windows
box inside. The windows box is using DNS on an outside server, and it hasn't
experienced any NAT-related glitches.

-- 
    Mason Loring Bliss  mason@acheron.middleboro.ma.us  They also surf who
awake ? sleep : dream;  http://acheron.ne.mediaone.net  only stand on waves.