Author: Dan Larsson
Date: 31-10-00 12:03
You should try the *BSD type masq-type-solution, NATD.
Here's a shortlist of what you'd need to do to use it:
+ Recompile your kernel with the option IPDIVERT
+ Add the following to your /etc/rc.conf
gateway_enable="YES"
firewall_enable="YES"
firewall_type="SIMPLE"
natd_enable="YES"
natd_interface="<nic with real internet address>"
natd_flags="-f /etc/rc.natd"
+ Add a few basic things to your /etc/rc.natd file:
echo -e "same_ports
use_sockets
unregistered_only
dynamic" >
/etc/rc.natd
+ Reboot and enjoy!
This works for me!
Note that you're probably better off creating your own 'firewall_type' to suit
your needs better. To read more about this check out the man pages for
'ipfw' and 'natd'.
|
|