Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 Apr 1998 21:55:41 -0400 (EDT)
From:      Wilson MacGyver <macgyver@cylatech.com>
To:        questions@FreeBSD.ORG
Subject:   a question on firewall/proxy
Message-ID:  <199805010155.VAA20507@lymu.cylatech.com>

next in thread | raw e-mail | index | archive | help
Hi,

I have a question regarding the firewall.

Let's say I have a FreeBSD box setup as the firewall. I alias the ip
address, so the NIC has a real IP address, and 192.168.1.1. I then
setup the rest of the LAN using 192.168.1.x address, with the 192.168.1.1
set as the gateway for all the win95 machines on the LAN. I recompile
the kernel with IPFIREWALL, and IPDIVERT. Set rc.conf's firewall setting
to YES, policy to 'open' for testing. edit /etc/service to insert
NATD entry, and then start the natd with "natd -log -interface ed1"
<ed1 is the NIC>. I did have the rc.conf GATEWAY setting to YES. But
the Network Address Translating doesn't seem to be happening. the alias.log
in /var/log is empty. Did I miss something simple, or am I totally clueless
here? Is the routing/NAT not working becuase I'm choosing to use a
non-routeable address, ie 192.168.x.x? If that's the case, then is the
only way to setup firewall is, I can't use any of the reserve address?

I suppose I can go to the proxy route instead, but for a general proxy
that works with telnet, ftp, www, ICQ, real audio, ie all the typicall
goodies a wi95 user would want to run, what should I use? Socks5?


Thanks a bunch,
Mac


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199805010155.VAA20507>