Slashdot Mirror

← Back to Stories (view on slashdot.org)

Ask Slashdot: IP Masquerading Drawbacks?

Posted by Cliff on from the getting-it-working dept.

A Nameless Slashdotter submitted this question: "IP Masquerading (NAT under FreeBSD) is straight from the Gods. Yet it has a few very large drawbacks, such as inability to do DCC or ICQ file transfers, or play games over the internet on one of the Masq'ed machines, even with the "irc" and "quake" masquerading modules loaded. Someone give me options to solve this problem, be it another operating system, a firewall setting, a program or setup!"

2 of 212 comments (clear)

  1. Masquerade resources by httptech · · Score: 5
    Try this page: http://www.tsmservices.com/masq/

    You can find information there on getting just about any application working with masquerading.

  2. How I Do It on Linux by DrKirwin · · Score: 5

    Had the same prob using my masq't machines to ftp to and from the net. So, I telnet to my linux machine, and:

    /sbin/modprobe --list | grep ftp

    which returns:

    /lib/modules/2.2.5-15/ipv4/ip_masq_ftp.o

    Then I (as root):

    /sbin/modprobe ip_masq_ftp.o

    This adds the ability to do ftp from a masq't machine, or does for me. There are other protocols, such as for RealAudio. Grepping on "masq" will find 'em.

    Ie:

    /sbin/modprobe -l | grep masq

    I'm not sure that the loaded module persists if it isn't called for a while. There are parameters governing this sort of thing. You can also add the line to your /etc/rc.local (or whatever).

    Looking forward to seeing other solutions! (Far as I can tell, I'm first post.)

    Anyway, gives you a place to manpage if nothing else....

    -K