Real IP under NAT
cswiger at mac.com
Mon Jul 18 15:55:40 GMT 2005
> Hello Chuck,
[ ... ]
> No, that won't work, because i need an external IP on LAN machine.
> Ext IP adresses - 220.127.116.11-18.104.22.168
> Gate ext_if - 22.214.171.124
> Gate int_if - 192.168.0.1
> LAN (via NAT) machines - 192.168.0.2-20
> Another LAN (via NAT) machine - 126.96.36.199
natd doesn't care whether you use routable or non-routable IPs; you can NAT an
external IP, too, if you really want to.
But if you simply want to set up a small DMZ where the hosts are not doing NAT
but just using routable IP's, that's trivial: set gateway_enable in
/etc/rc.conf, and away you go. In this case, you'd want three interfaces on
the box, a WAN, a LAN, and a DMZ, preferably all on distinct subnets.
More information about the freebsd-questions