Maybe we should go back to debating the merits of MacOS and OS/2 :-\
</sarcasm>
That's because the network address translation included with the Linux
kernel is not a complete implementation. NAT implies fewer limitations
to the clients behind the firewall.
Linux Masq:
x number of systems --> Linux Firewall --> Internet
Multiple IPs Single IP Sees single IP
(RFC1597 internal)
NAT "done right" :
x number of systems --> NAT firewall --> Internet
Multiple IPs Pool of IPs Sees ont of a number if IPs
(RFC1597 internal)
NAT, for instance, would (should) allow multiple systems to connect to
the same quake server and appear as different machines. Stock Linux masq
cannot do this, and so the term masqerading is somewhat more accurate,
IMHO.
I remember this from a paper that I read some time ago, probably a
long-gone unmaintained FAQ of some sort. Don't ask me to find you the
URL, please.
Cheers,
Jan
-- facts below, opinion aboveAccept that some days you're the pigeon, and some days you're the statue.