natd

[pattifoster]

I need help setting up natd.&nbsp;&nbsp;I've installed FreeBSD 4.0 and now I don't know what to do next.&nbsp;&nbsp;My rc.conf file has gateway and router enabled, firewall option is set to yes and open.<br><br>I've included te ipdivert, ipfirewall options in my kernel.<br><br>Now, I've managed to confuse myself.<br><br>Patti<br>

 

[rycamor]

Do you have two ethernet cards inyour system?

 

[pattifoster]

Hi<br><br>No, I don't have two ethernet cards, I use a hub.&nbsp;&nbsp;&nbsp;<br><br>Patti

 

[rycamor]

Using two ethernet cards does not mean you're not using a hub. For example, my home DSL connection passes from my DSL modem(with ethernet) to ethernet card A on my FreeBSD box. Then natd routes the data to card B (while translating IPs) to pass the data on to my hub, where I can connect as many computers as I want. Thus my internal network is isolated from the external one. Inside my firewall, I use the IP range 192.168.xxx.xxx, while my external connection uses 64.34.xxx.xxx.<br><br>So the question I have is what are you routing from, and to, that you need natd for? Is it an external dial-up connection, or something else? In other words, an external, and an internal network.<br><br>I know it is possible to run natd with only one ethernet card and no other outward network connection, just having the external connection go straight to the hub, and somehow use natd to separate internal and external IPs right on the hub, but I can't see how it would be as secure, because you are not really partitioning your network. My expertise does not extend that far, though, so I invite other comments.

 

[DigitalExtremist]

yes it is possible to do like you said, but you'll be getting a shiz load of arp errors... I personally run my DSL router into a 8 port 10mb hub, which plugs into server A and Server B, then Server B has 2 nics in it and natd, which plugs into Hub B... its really secure ... and the ladies like it... so I would just tell you to go look at the natd man page or &quot;RTFM&quot; for those hardcore man users...

LateZ
-Digital