From owner-freebsd-questions Tue Jan 7 13:21:30 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8219937B401 for ; Tue, 7 Jan 2003 13:21:28 -0800 (PST) Received: from nwkea-mail-1.sun.com (nwkea-mail-1.sun.com [192.18.42.13]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0909943ED1 for ; Tue, 7 Jan 2003 13:21:28 -0800 (PST) (envelope-from brundage@sr2-unwk-01.sfbay.sun.com) Received: from sfbaymail1sca.SFBay.Sun.COM ([129.145.154.35]) by nwkea-mail-1.sun.com (8.9.3+Sun/8.9.3) with ESMTP id NAA16689 for ; Tue, 7 Jan 2003 13:21:27 -0800 (PST) Received: from sr2-unwk-01.sfbay.sun.com (sr2-unwk-01.SFBay.Sun.COM [129.149.2.15]) by sfbaymail1sca.SFBay.Sun.COM (8.12.2+Sun/8.12.2/ENSMAIL,v2.2) with ESMTP id h07LLRg4024453 for ; Tue, 7 Jan 2003 13:21:27 -0800 (PST) Received: (from brundage@localhost) by sr2-unwk-01.sfbay.sun.com (8.10.2+Sun/8.10.2) id h07LLMK33193 for freebsd-questions@freebsd.org; Tue, 7 Jan 2003 13:21:22 -0800 (PST) Date: Tue, 7 Jan 2003 13:21:22 -0800 From: Dean To: freebsd-questions@freebsd.org Subject: bridging question Message-ID: <20030107132121.L42697@sr2-unwk-01.sfbay.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hello Question-ers, (Please cc me in replies) I have a -stable box that I would like to bridge ethernet across 2 of 3 interfaces. If I read the man page correctly, all I have to do is set net.link.ether.bridge to 1 and set net.link.ether.bridge_cfg to a comma- seperated list of interfaces. Eg sysctl net.link.ether.bridge_cfg=dc0:0,dc1:0 would bridge ethernet across dc0 and dc1. My reasoning for this is to consolidate my firewalls. I have a bridge screening my DSL link and then a NAT machine which hides some more secured networks. Internet (+) DSL modem | [Bridge] | ---+-+--- DMZ | [NAT] | ----+---- "Secure" net I'd like to simplify this to Internet (+) DSL modem | | dc0 +---+ |F/W| dc0 bridged with dc1 +---+ dc1 | | dc2 | +--------- "Secure" net +------- DMZ Is this a sound idea? Thanks much, --Dean - Unscrambler of eggs -- Quality Web Hosting http://www.3llamas.com Take your time, take your chances -------------------------------------------------------------------------------- It matters not how strait the gate / How charged with punishment the scroll I am the master of my fate / I am the captain of my soul. -- Invictus -- -- William E Henley -- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message