Re: Firewall + NAT

[Kevin Colby <kevinc grainsystems com>]

CHAN Chow Chin, David wrote:
> 
> Basically, what I want it to do is to take over the router's NAT job.
> My problem is, in the Cisco router, you can nat a range of internal IPs
> to a range of external ips.

Convential Linux firewall setups use IP Masquerading, which maps many
IPs to a single IP on the outside and handles some quirks that a few
protocols have to allow this to work well.

Full NAT is many-to-many mapping, and this is not often setup using
Linux at present.  I did find a good link that goes into the details
of all this though:  http://linas.org/linux/load.html

I have only personally configured the former, so best of luck to you.

	- Kevin Colby
	  kevinc grainsystems com