[plug] NAT on a linux box

[Leon Blackwell]

On Tue, Feb 18, 2003 at 11:54:01AM +0800, Daniel Pearson wrote:
> Ok, this is what I want to ultimately achieve: a NAT/Firewall script that
> can be controlled through /etc/init.d/ (debian)

Take a look at the ipmasq package.  Simple, init.d-able, and easily
customisable.  An "out of the box" install will NAT your local networks
behind a single ppp connection.


> No services other than ppp, ssh, postfix, qpopper, mutt, fethcmail

Consider teapop instead of qpopper; it nicely ignore uw-imap's control
messages, if yyou ever happen to start mixing IMAP and POP3.
(or you can consider it because of its catchy name  :)


> Note: IPTables, not IPChains

ipmasq plays nicely with ipfwadm, ipchains and netfilter (iptables).


-- 
 Leon Blackwell                | For every complex problem, there is a
 http://www.lostrealm.com/     | solution that is simple, neat, and
 jabber:lionfire at lostrealm.com | wrong.
                               | -- Henry Louis Mencken