🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: aus.computers.linux
Article #54414

Re: IP Forwarding vs Proxy/Firewall

#54414
From: Rodos
Date: Wed, 29 Oct 1997 00:00
22 lines
1484 bytes
Nick Andrew wrote:
> >Or is ip masquerading a better option?
> You can use either. My preference when setting up these kind of things
> is to use private network numbers on the "internal" side and IP
> masquerade, but also a Squid proxy on the Linux gateway for all
> HTTP and FTP requests. The Squid proxy will make things more efficient
> for web and there's masquerade for other protocols. You'll probably want
> to setup BIND on the Linux gateway as well.

As one of Nicks very happy customers I can vouch for this setup. I run a
Linux machine with with Squid, BIND and sendmail on a perm link and it
runs fantastic! Uptime now 52 days. I used to run the link from my NT
machine but Linux is SO much easier and more stable! I suggest you look
into diald to run your modem connection. Diald can do masquerading if
you require it (I have 16 addresses so don't need that yet). With TCP
wrappers and ipfwadm its also more secure than my NT box (well I hope
so). 

--
Rodney Haywood
rodos@pobox.com.nospam
Technical Details
Message-ID: <3455E6A0.FC9FF325@127.0.0.1>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <34556e84.5449986@192.168.0.1> <63466v$itn$1@gidora.kralizec.net.au>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 102983,c4ce9b17ffd8de92
X-Google-Attributes: gid102983,public
From: Rodos <rodos@127.0.0.1>
Subject: Re: IP Forwarding vs Proxy/Firewall
Date: 1997/10/29
Message-ID: <3455E6A0.FC9FF325@127.0.0.1>
X-Deja-AN: 285535435
References: <34556e84.5449986@192.168.0.1> <63466v$itn$1@gidora.kralizec.net.au>
Organization: Kralizec Internet, http://www.zeta.org.au/
Newsgroups: aus.computers.linux