Need help. ProxyARP? Other better way?

[John Abbott <jabbott_(_at_)_abbotts_(_dot_)_org>]

I have a switched network with four machines, www1-www4 that I would like to put behind an openBSD firewall.  I think I need to proxyarp on the openbsd box but this is really at the fuzzy limits of my understanding what I am doing.

Here is some ascii art.                              --------
                                          -----------| www1 |
                                          |          --------
                                          |
                                          |          --------
  --------        --------                |    ------| www2 |
  | 100  |        | open |     -------    |    |     --------
  | base |        | BSD  |     | 10  |-----    |
  |switch|--------| box  |     | base|----------     --------
  |      |        |      |-----| hub |---------------| www3 |
  --------        |      |     |     |----------     --------
                  |      |     -------         |
                 *--------*                    |     --------
                                               ------| www4 |
                                                     --------
I don't want to run NAT, these are named hosts.  What I want to do is have the openbsd box answer as www1, www2 etc,  filter and then forward the packet to the proper machine.

--ja