Subject: Re: ipnat when box IP is changing
To: Wojciech Puchar <wojtek@wojtek.3miasto.net>
From: Bruce Anderson <brucea@shell.spacestar.net>
List: netbsd-users
Date: 10/09/2001 20:57:25
On Sun, Oct 7, 2001 5:16 AM, Wojciech Puchar
<mailto:wojtek@wojtek.3miasto.net> wrote:
>>
>> We do not masquerade (that is Linux). NAT = Network Address Translation.
>what's the difference in practice?

 NAT is the function (or process),  ipchains, ipmasquerade and
ipnat are proper names of specific implementations.

Do not use masquerade as a synonym for NAT.


For Network Address Translation on NetBSD
See: ipnat(8) ipnat(5) ipf(8) and /usr/share/examples/ipf


<http://www.linuxhq.com/ldp/howto/IPCHAINS-HOWTO-1.html>
"Linux ipchains is a rewrite of the Linux IPv4 firewalling code 
 (which was mainly stolen from BSD) and a rewrite of ipfwadm, 
 which was a rewrite of BSD's ipfw, I believe. It is required
 to administer the IP packet filters in Linux kernel versions
 2.1.102 and above."

<http://www.linuxhq.com/ldp/howto/IP-Masquerade-HOWTO-2.html>
Pre-Linux kernel versions 2.1.102
"IP Masquerade is a networking function in Linux similar to one-to-many
 NAT (Network Address Translation) found in many commercial firewalls
 and network routers. For example, if a Linux host is connected to the
 Internet via PPP, Ethernet, etc., the IP Masquerade feature allows
 other "internal" computers connected to this Linux box (via PPP,
 Ethernet, etc.) to also reach the Internet as well. 
 Linux IP Masquerading allows for this functionality even
 though these internal machines don't have an officially
 assigned IP addresses."





" Stamp out root logins .  .  .  . su "   --Bruce Anderson  
 This message was created and sent using Cyberdog 2.0, MacOS 8.6,
 awk, find, sed, sendmail, sh, and NetBSD a free Multi-Platform OS.
 NetBSD runs on  44 different system architectures featuring 16
 distinct families of CPUs.   http://www.netbsd.org/