Subject: Re: ipnat when box IP is changing
To: Wojciech Puchar <wojtek@wojtek.3miasto.net>
From: Bruce Anderson <brucea@shell.spacestar.net>
List: netbsd-users
Date: 10/09/2001 20:57:25
On Sun, Oct 7, 2001 5:16 AM, Wojciech Puchar
<mailto:wojtek@wojtek.3miasto.net> wrote:
>>
>> We do not masquerade (that is Linux). NAT = Network Address Translation.
>what's the difference in practice?
NAT is the function (or process), ipchains, ipmasquerade and
ipnat are proper names of specific implementations.
Do not use masquerade as a synonym for NAT.
For Network Address Translation on NetBSD
See: ipnat(8) ipnat(5) ipf(8) and /usr/share/examples/ipf
<http://www.linuxhq.com/ldp/howto/IPCHAINS-HOWTO-1.html>
"Linux ipchains is a rewrite of the Linux IPv4 firewalling code
(which was mainly stolen from BSD) and a rewrite of ipfwadm,
which was a rewrite of BSD's ipfw, I believe. It is required
to administer the IP packet filters in Linux kernel versions
2.1.102 and above."
<http://www.linuxhq.com/ldp/howto/IP-Masquerade-HOWTO-2.html>
Pre-Linux kernel versions 2.1.102
"IP Masquerade is a networking function in Linux similar to one-to-many
NAT (Network Address Translation) found in many commercial firewalls
and network routers. For example, if a Linux host is connected to the
Internet via PPP, Ethernet, etc., the IP Masquerade feature allows
other "internal" computers connected to this Linux box (via PPP,
Ethernet, etc.) to also reach the Internet as well.
Linux IP Masquerading allows for this functionality even
though these internal machines don't have an officially
assigned IP addresses."
" Stamp out root logins . . . . su " --Bruce Anderson
This message was created and sent using Cyberdog 2.0, MacOS 8.6,
awk, find, sed, sendmail, sh, and NetBSD a free Multi-Platform OS.
NetBSD runs on 44 different system architectures featuring 16
distinct families of CPUs. http://www.netbsd.org/