Real IP under NAT

[Chuck Swiger]

DerAlSem wrote:
> Hello Chuck,
[ ... ]
> No, that won't work, because i need an external IP on LAN machine.
> 
> Ext IP adresses - 1.2.3.1-1.2.3.5
> Gate ext_if - 1.2.3.1
> Gate int_if - 192.168.0.1
> LAN (via NAT) machines - 192.168.0.2-20
> Another LAN (via NAT) machine - 1.2.3.2
> 
> How?

natd doesn't care whether you use routable or non-routable IPs; you can NAT an 
external IP, too, if you really want to.

But if you simply want to set up a small DMZ where the hosts are not doing NAT 
but just using routable IP's, that's trivial: set gateway_enable in 
/etc/rc.conf, and away you go.  In this case, you'd want three interfaces on 
the box, a WAN, a LAN, and a DMZ, preferably all on distinct subnets.

-- 
-Chuck