Re: confusion with natd

From: Juhani Tali (juhani_at_kernel.ee)
Date: 10/01/04

  • Next message: Mikhail P.: "Re: confusion with natd" 
    Date: Fri, 01 Oct 2004 09:51:49 +0300
To: miha@ghuug.org

    Mikhail P. wrote:

    > HOST_A:
    > FreeBSD, serves as gateway (NAT) for LAN (192.168.0.0/24)
    > has two NICs:
    > rl0 - internal (192.168.0.1)
    > rl1 - external (connected to DSL modem), runs natd (natd -n rl1)
    > net.inet.ip.forwarding=1
    > openvpn from ports
    >
    > HOST_B:
    > FreeBSD, remote host, single NIC, public IP.
    > net.inet.ip.forwarding=1
    > openvpn from ports

    I would set it up like so:

    This one in host B
    > natd -interface rl1

    And this in host A
    > natd -port 8568 -interface tun0

    You need to translate all the 192.168.0.x to tunnel's address and you
    cannot do it in host B, because it has no direct connection to 192.168.0.x.
    Another solution is with routing, so host B has direct access to the
    192.168.0.x network.

    > I have been pulling hair off my poor head for few hours on this issue, but did
    > not come to solution, so I'm looking for advises.

    Juhani Tali
    _______________________________________________
    freebsd-isp@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"

  • Next message: Mikhail P.: "Re: confusion with natd"

    Relevant Pages

    • Re: Attacks on ssh port
      ... Trigger one of the "backdoor" ports, and you're out of my game. ... >> count it won't log any more than that number of attempts from a host. ... >> from the logfiles or enable some ports NIDs, or 3rd party NIDS to do ...
      (FreeBSD-Security)
    • Re: Please help with winroute proxy settings
      ... enable logging on the DENY rules so you can analyze what ports are beeing ... > Permit TCP Any host all ports => Any host port=80. ...
      (comp.security.firewalls)
    • Re: XP Firewall on Modem Connection for PC Anywhere?
      ... PCanywhere can be placed into a secure connection as ... because inbound ports using NMRDS or PCAW on the host ... network and can compromise machines on the network. ...
      (comp.security.firewalls)
    • Re: Remote Desktop Connection and WinRoute Pro
      ... > running WinRoute Pro with the ISDN Internet connection. ... > Permit IP Any host => Any host ... > Permit TCP Any host all ports => Any host all ports!SYN ...
      (comp.security.firewalls)
    • Re: [Full-Disclosure] New Security News Website
      ... If you scanned my Windows XP boxes, you'd find a bunch of juicy ports open. ... bash-2.05b# telnet www.hackerintel.com 113 ... Connection closed by foreign host. ...
      (Full-Disclosure)