/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */ -----BEGIN PGP SIGNED MESSAGE----- Phil N, on Mon, 1 May 2000, wrote: > To: Erri Wibowo <[EMAIL PROTECTED]> > Cc: [EMAIL PROTECTED] > From: Phil N <[EMAIL PROTECTED]> > Subject: Re: [Masq] IP Masq Scalability > Date: Mon, 01 May 2000 09:02:04 -0400 > > Erri - Sorry, the original message hasn't made it to me yet, or I missed it? > I would be that your bottleneck will be the 64K leased line. I manage a > firewall for a client (school) that has 50 or so users behind it - a P133 48MB He's exactly right! I'm masquerading 270 Human users and forwarding/ipchains-ing 30-some-odd HTTP servers on a 486-100 with 32MBram, and it's capable of allowing full T1 speeds when I download new kernels ;-) Having said *that*, I must point out that I'm in the process of configuring a Pentium 133 to be it's replacement - the Buslogic SCSI card or the hard drive in the existing box is dying, and I "cannot find" <cough, cough> another 486 replacement... and the 133 was just sitting there... > > - Does IP MASQ can support multiple external IP address ? If you mean different internal users going to different sites - YES. Like a charm. You don't have to do a thing. If you mean masquerading internal users out different interfaces on the same box, the answer is yes. Just remember that ipchains DOESN'T do the routing, so you have to have the routes set up properly before running the script. We use several 192.168.0.0/16 networks locally, as well as two routable networks, and it ALL goes through the 486-100. Some 192.168 nets are masqueraded to others (don't ask why) so the entire network appears as one "user". The bandwidth doesn't appear to be impacted much, if at all... - -- -----BEGIN PGP SIGNATURE----- Version: 2.6.3ia Charset: noconv Comment: Processed by mkpgp, a Pine/PGP interface on Linux-2.2.x. iQC1AwUBOQ2NXO0qVrnIA6PFAQGdCQUAqA8i82f3Do9XJUXVUw7kEdn4RylruH99 t8qKKii9RE7bS9DftKuqnw5l3Z1nmHuOzQEqo8G3anQcNA4+QrhFvA2eplYnGNb0 hPpq/3pArtzdufr9kCi3xCRWmIUmfHtXXCLGfhl/6TWhvaslDc5ftEu3FxyrgiFp efwAdYju9y2hmWlZMP79Oe61K54VowNh9BO6LCdn0u4sMYD2Rj7ZQw== =XPpH -----END PGP SIGNATURE----- Systems Administrator Central Information Services R.E. Gilmore Investments 130 Herzberg Rd Kanata Ontario Canada K2K 3B7 (613)592-2944 x3329 "People should *THINK*; computers should _WORK_" (613)271-3287 (direct) PGP public key http://ludwig.doculink.com/derekm.asc (613)271-1618 (fax) _______________________________________________ Masq maillist - [EMAIL PROTECTED] Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING! or email to [EMAIL PROTECTED] PLEASE read the HOWTO and search the archives before posting. You can start your search at http://www.indyramp.com/masq/ Please keep general linux/unix/pc/internet questions off the list.
