Article View: aus.computers.linux
Article #54414Re: IP Forwarding vs Proxy/Firewall
From: Rodos
Date: Wed, 29 Oct 1997 00:00
Date: Wed, 29 Oct 1997 00:00
22 lines
1484 bytes
1484 bytes
Nick Andrew wrote: > >Or is ip masquerading a better option? > You can use either. My preference when setting up these kind of things > is to use private network numbers on the "internal" side and IP > masquerade, but also a Squid proxy on the Linux gateway for all > HTTP and FTP requests. The Squid proxy will make things more efficient > for web and there's masquerade for other protocols. You'll probably want > to setup BIND on the Linux gateway as well. As one of Nicks very happy customers I can vouch for this setup. I run a Linux machine with with Squid, BIND and sendmail on a perm link and it runs fantastic! Uptime now 52 days. I used to run the link from my NT machine but Linux is SO much easier and more stable! I suggest you look into diald to run your modem connection. Diald can do masquerading if you require it (I have 16 addresses so don't need that yet). With TCP wrappers and ipfwadm its also more secure than my NT box (well I hope so). -- Rodney Haywood rodos@pobox.com.nospam
Technical Details
Message-ID:
<3455E6A0.FC9FF325@127.0.0.1>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<34556e84.5449986@192.168.0.1> <63466v$itn$1@gidora.kralizec.net.au>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 102983,c4ce9b17ffd8de92 X-Google-Attributes: gid102983,public From: Rodos <rodos@127.0.0.1> Subject: Re: IP Forwarding vs Proxy/Firewall Date: 1997/10/29 Message-ID: <3455E6A0.FC9FF325@127.0.0.1> X-Deja-AN: 285535435 References: <34556e84.5449986@192.168.0.1> <63466v$itn$1@gidora.kralizec.net.au> Organization: Kralizec Internet, http://www.zeta.org.au/ Newsgroups: aus.computers.linux