/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */ I have a continuing problem that I so far have not found a solution to. We setup small offices with DSL/Cable modems. Some of the providers we use will either not give us the number of IP addresses we need or will charge a punitive fee for them. A typical scenario is as follows: We can easily get a net block of say 14 address but we have 20 hosts on our network. For example my public assigned range could be xxx.xxx.xxx.10 to xxx.xxx.xxx.23 With the newer versions of Linux I can easily setup NAT and only then use one public address. The problem is that on these 20 hosts I will have the following services running all requiring remote Internet based access. NT Server1 - MSSQL- Linux RH 6.2 - FTP Server Win 98 Server - Proprietary server service GoldMine Sync manager using port 5993 PC Anywhere on 4 clients As you can see I have a total of 7 server services I need to connect to. I believe I can use port forwarding for the unique services like, Sql, ftp, GoldMine but what to do about the random PCA users. What I visualize is using all private address inside for example 192.168.1.1/24 Then let all of my non-server clients use a single Public IP address for example xxx.xxx.xxx.10. Then I would like to map xxx.xxx.xxx.11 to 192.168.1.1 and xxx.xxx.xxx.12 to 192.168.1.2 etc. I have seen such a facility in hardware products. I did not make it up. The following link really gave me a lot to read: http://linas.org/linux/load.html This link http://proxy.iinchina.net/~wensong/ipnat/ mentiones proxy-arp This link is a full explination of proxy-arp http://www.linuxdoc.org/HOWTO/mini/Proxy-ARP-Subnet.html I'm just not experienced enough to even know if this is what I'm interested in. I have strong desire to find a solution that works with Red Hat. I have other services that will probably share space on the server used to implement this solution and am unlikely to find support for another unixin. I saw ipfilter but it is based on BSD and would really prefer Linux. Can what I want to do be done? I could try to use non-standard ports for the second pca call in but am afraid of the support requirements. Can NAT do this for me? There is a hardware solution called the Webramp 700s that does this in case you're interested as to where I got the idea. www.rampnet.com They licence it from sonicwall, same box. I would like to have the same function with Linux for obvious reasons. ____________________ David Metzler President Soft Designs, Inc. 203-245-4118 ext. 202 _______________________________________________ Masq maillist - [EMAIL PROTECTED] Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING! or email to [EMAIL PROTECTED] PLEASE read the HOWTO and search the archives before posting. You can start your search at http://www.indyramp.com/masq/ Please keep general linux/unix/pc/internet questions off the list.
