Article View: comp.os.linux.networking
Article #233Re: IP Forwarding vs Proxy/Firewall
From: Frank Sweetser
Date: Tue, 28 Oct 1997 00:00
Date: Tue, 28 Oct 1997 00:00
40 lines
2300 bytes
2300 bytes
whyza@mindless.com (Rossco) writes: > > Hi all. > > Been up and running with linux for a few months now and I would like > to use linux as a firewall/proxy for my home lan. > > I have 3 machines, a dedicated linux box, a winnt server, and a win95 > workstation. > I currently run the proxy service from a winnt server machine, using > wingate, a proxy server. > > When I initially wanted to set up a system to put all my machines on > my home lan on the net thru one modem, I was remember being told by my > isp that a proxy server was the only way to to accomplish this, as > they were not prepared to update thier routing tables to forward > packets to my second and third machines, without a cost being > incurred. > > I would like to know if this is still the case, if I now use linux > instead of nt4, to forward packets to my second and third machines. I > know linux can act as a firewall/proxy and do ip forwarding? But if I > choose ip forwarding will my my isp strill need to upgrade thier > routing tables? > > Or is ip masquerading a better option? Yes, it sounds like ip masquerading is the best choice here. It acts like a proxy server, but on the network level, instead of for just http connects. You can find a howto on setting it up at http://sunsite.unc.edu/LDP -- Frank Sweetser rasmusin at wpi.edu fsweetser at blee.net | PGP key available paramount.res.wpi.net RedHat 4.9.1 Linux 2.0.31 i586 | at public servers "If the future navigation system [for interactive networked services on the NII] looks like something from Microsoft, it will never work." (Chairman of Walt Disney Television & Telecommunications)
Technical Details
Message-ID:
<8767qia05g.fsf@paramount.res.wpi.net>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<34556e84.5449986@192.168.0.1>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10669a,c4ce9b17ffd8de92,start X-Google-Attributes: gid10669a,public X-Google-Thread: 102983,c4ce9b17ffd8de92,start X-Google-Attributes: gid102983,public From: Frank Sweetser <rasmusin@wpi.edu> Subject: Re: IP Forwarding vs Proxy/Firewall Date: 1997/10/28 Message-ID: <8767qia05g.fsf@paramount.res.wpi.net> X-Deja-AN: 285470056 Sender: rasmusin@paramount.res.wpi.net References: <34556e84.5449986@192.168.0.1> To: whyza@mindless.com Organization: Worcester Polytechnic Institute Newsgroups: comp.os.linux.networking,aus.computers.linux