nat exclusion?
Matthew D. Fuller
fullermd at over-yonder.net
Wed Nov 2 20:54:50 PST 2005
On Wed, Nov 02, 2005 at 04:55:32PM -0500 I heard the voice of
Charles Swiger, and lo! it spake thus:
> On Nov 2, 2005, at 4:45 PM, Peter Gregorc wrote:
> >I've got 86.61.75.240/30
> >.241 is for BSD
> >.242 for WS1
> >.243 broadcast
> >So two are usable for outside usage, if NAT is disabled.
>
> Sure, but normally, either .1 or .2 of a /30 subnet (ie, your .241
> or .242) is the externally-connected router of your ISP. A few of
> the better ISP's will support switching their devices from being a
> router to acting like a bridge, thus requiring you to provide a
> dual- homed machine yourself.
Presumably he's using the BSD box as the router (PPPoE). You can get
away with a single NIC just fine; I go through PPPoE with the single
NIC in my old 486 router, and forward ports internally. You want "nat
unregistered_only yes" in the ppp.conf so it only NAT's private IP's
and leaves public ones alone.
--
Matthew Fuller (MF4839) | fullermd at over-yonder.net
Systems/Network Administrator | http://www.over-yonder.net/~fullermd/
On the Internet, nobody can hear you scream.
More information about the freebsd-net
mailing list