what it is the better masquerade or SNAT

I has a Ip public true, I want to do a firewall, but i don know wich I kind Should i use, masquerade or SNAT?, someone can i help?.

thanks very well.

Thomas
Estamos en Calle 20 Numero 4110 % 41 y 47,
Miramar, Playa, Ciudad Habana, Cuba.
Telf:537(203-01-60) y (202-79-20)
Fax: 537(204-96-64)
Visitenos en: http://www.gecyt.cu

MASQUERADE is only necessary if the IP is dynamic, with SNAT you must specify the IP address to use. MASQ will work in the same situations as SNAT, but incurs more overhead because netfilter will check the IP of the outbound interface every time.

In my own setup, my IP is technically dynamic, but in reality it stays static for minimum several days, usually until I manually reset the ADSL modem, so I use SNAT. The rare times this is a problem I simply restart my firewall script, which clips the current IP from a "ifconfig ppp0" and builds rules with it.

I can get away with this because usually only myself and my 8-year-old actually use the machines on my network, so if my IP changes it wouldn't create any real problems except that he couldn't connect to disney.com or wherever... :^) ("DADDY!! I can't get to lego.com!"..."service firewall restart"..."Try now...")

j

----- Original Message -----
From: "Administrador de Red" <[email protected]>
To: <[email protected]>
Sent: Friday, November 29, 2002 4:32 PM
Subject: what it is the better masquerade or SNAT

Using SNAT with a static IP is usually considered better. Using masquerading requires more overhead which isn't necessary if you already know what IP you are going to use.

Brandon Broyles