/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */ David, certainly the PIX isn't cheap relative to say a Linux firewall, but I just bought three more of them (515Rs) at less than 4K apiece. In the world of commercial firewalls, that certainly isn't the high end of the line. :>) I guess my point was that the PIX's NAT innards have been around for about 5 years, from the days before Cisco purchased the original developer. So I guess I'm really just rather surprised that my goal has not been addressed by the Linux community. Like I said in an earlier post, I would have guessed that this sort of thing would be a really common desire for Linux at the edge of corporate networks -- but I'd be wrong. :>) In regards to how the PIX does NAT, does it perform source routing? In regards to how Linux decides which IP address to MASQ with, can you explain why it won't use an ip alias? I've been slowly writing up a summarized post for the linux-kernel list, in the hopes that this is not really a masq/ipchains issue but more of a generic ip/routing issue. Hopefully I'll get it onto the mailing-list before the holidays. Doug Apel Sr. Network Administrator Omnipoint Technologies, Inc. [EMAIL PROTECTED] 719-884-2571 > -----Original Message----- > From: David A. Ranch [mailto:[EMAIL PROTECTED]] > Sent: Saturday, December 18, 1999 11:45 AM > To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: Re: [Masq] binding particular IP addr to masq'd packets -- me > too. > > > /* HINT: Search archives @ http://www.indyramp.com/masq/ > before posting! */ > > > >So far, it looks like the solution is to go to iproute2, but > that just seems > >kind of kludgy to me. I mean, cheap firewalls (like a > cisco PIX) have been > >doing this for years -- have they always been doing source > routing? It > >just seems like there has to be an easier way to implement this.... > > A Cisco PIX is NOT cheap. > > --David > .------------------------------------------------------------- > ---------------. > | David A. Ranch - Linux/Networking/PC hardware > [EMAIL PROTECTED] | > !---- > ----! > `----- For more detailed info, see > http://www.ecst.csuchico.edu/~dranch -----' > > _______________________________________________ > Masq maillist - [EMAIL PROTECTED] > Admin requests can be handled at > http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING! > or email to [EMAIL PROTECTED] > > PLEASE read the HOWTO and search the archives before posting. > You can start your search at http://www.indyramp.com/masq/ > Please keep general linux/unix/pc/internet questions off the list. _______________________________________________ Masq maillist - [EMAIL PROTECTED] Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING! or email to [EMAIL PROTECTED] PLEASE read the HOWTO and search the archives before posting. You can start your search at http://www.indyramp.com/masq/ Please keep general linux/unix/pc/internet questions off the list.
