🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.os.linux.networking
Article #233

Re: IP Forwarding vs Proxy/Firewall

#233
From: Frank Sweetser
Date: Tue, 28 Oct 1997 00:00
40 lines
2300 bytes
whyza@mindless.com (Rossco) writes:

> 
> Hi all.
> 
> Been up and running with linux for a few months now and I would like
> to use linux as a firewall/proxy for my home lan.
> 
> I have 3 machines, a dedicated linux box, a winnt server, and a win95
> workstation.
> I currently run the proxy service from a winnt server machine, using
> wingate, a proxy server.
> 
> When I initially wanted to set up a system to put all my machines on
> my home lan on the net thru one modem, I was remember being told by my
> isp that a proxy server was the only way to to accomplish this, as
> they were not prepared to update thier routing tables to forward
> packets to my second and third machines, without a cost being
> incurred.
> 
> I would like to know if this is still the case, if I now use linux
> instead of nt4, to forward packets to my second and third machines. I
> know linux can act as a firewall/proxy and do ip forwarding?  But if I
> choose ip forwarding will my  my isp strill need to upgrade thier
> routing tables? 
> 
> Or is ip masquerading a better option?

Yes, it sounds like ip masquerading is the best choice here.  It acts like
a proxy server, but on the network level, instead of for just http
connects.   You can find a howto on setting it up at
http://sunsite.unc.edu/LDP 

-- 
Frank Sweetser rasmusin at wpi.edu fsweetser at blee.net | PGP key available
paramount.res.wpi.net RedHat 4.9.1 Linux 2.0.31 i586     | at public servers
"If the future navigation system [for interactive networked services on
the NII] looks like something from Microsoft, it will never work."
(Chairman of Walt Disney Television & Telecommunications)
Technical Details
Message-ID: <8767qia05g.fsf@paramount.res.wpi.net>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <34556e84.5449986@192.168.0.1>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10669a,c4ce9b17ffd8de92,start
X-Google-Attributes: gid10669a,public
X-Google-Thread: 102983,c4ce9b17ffd8de92,start
X-Google-Attributes: gid102983,public
From: Frank Sweetser <rasmusin@wpi.edu>
Subject: Re: IP Forwarding vs Proxy/Firewall
Date: 1997/10/28
Message-ID: <8767qia05g.fsf@paramount.res.wpi.net>
X-Deja-AN: 285470056
Sender: rasmusin@paramount.res.wpi.net
References: <34556e84.5449986@192.168.0.1>
To: whyza@mindless.com
Organization: Worcester Polytechnic Institute
Newsgroups: comp.os.linux.networking,aus.computers.linux