/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */ >David, certainly the PIX isn't cheap relative to say a Linux firewall, but I >just bought three more of them (515Rs) at less than 4K apiece. In the >world of commercial firewalls, that certainly isn't the high end of the >line. :>) I agree with that. But when it comes to commercial firewalls, I'm not sure if I would recommend a PIX. Mind you, I haven't seen a PIX since the 2.52 days (I think). I've still been the most impressed with Firewall-1 be it on a Sun or on a Nokia box. >I guess my point was that the PIX's NAT innards have been around for about 5 >years, from the days before Cisco purchased the original developer. Its a PC with a ROM card. Thats it. >So I >guess I'm really just rather surprised that my goal has not been addressed >by the Linux community. Like I said in an earlier post, I would have >guessed that this sort of thing would be a really common desire for Linux at >the edge of corporate networks -- but I'd be wrong. :>) Its not that common but some people are doing it. You will just have to play with it. Check out the MASQ archives since there was a serious discussion about it a few months ago. >In regards to how Linux decides which IP address to MASQ with, can you >explain why it won't use an ip alias? It just doesn't support it the way it was coded. Things are going to radically change with the 2.4.x kernels. As it stands, IPCHAINS and IP MASQ proper are dead. >I've been slowly writing up a summarized post for the linux-kernel list, in >the hopes that this is not really a masq/ipchains issue but more of a >generic ip/routing issue. Hopefully I'll get it onto the mailing-list >before the holidays. I think this is a good idea but it might be a moot point with the 2.4.x kernels. Question is.. is this functionality being planned for the new NetFilter/iptables code? --David .----------------------------------------------------------------------------. | David A. Ranch - Linux/Networking/PC hardware [EMAIL PROTECTED] | !---- ----! `----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----' _______________________________________________ Masq maillist - [EMAIL PROTECTED] Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING! or email to [EMAIL PROTECTED] PLEASE read the HOWTO and search the archives before posting. You can start your search at http://www.indyramp.com/masq/ Please keep general linux/unix/pc/internet questions off the list.
