From owner-freebsd-net@FreeBSD.ORG Mon Feb 18 22:18:06 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C5BD716A46B for ; Mon, 18 Feb 2008 22:18:06 +0000 (UTC) (envelope-from nb@ravenbrook.com) Received: from raven.ravenbrook.com (raven.ravenbrook.com [193.82.131.18]) by mx1.freebsd.org (Postfix) with ESMTP id 6251813C4CC for ; Mon, 18 Feb 2008 22:18:06 +0000 (UTC) (envelope-from nb@ravenbrook.com) Received: from thrush.ravenbrook.com (thrush.ravenbrook.com [193.112.141.145]) by raven.ravenbrook.com (8.13.8/8.13.8) with ESMTP id m1IMHpOF072385; Mon, 18 Feb 2008 22:17:51 GMT (envelope-from nb@ravenbrook.com) Received: from thrush.ravenbrook.com (localhost [127.0.0.1]) by thrush.ravenbrook.com (8.13.4/8.13.4) with ESMTP id m1IMHppd038867; Mon, 18 Feb 2008 22:17:51 GMT (envelope-from nb@thrush.ravenbrook.com) From: Nick Barnes To: Julian Elischer In-Reply-To: <47BA02E0.4090808@elischer.org> from Julian Elischer of "Mon, 18 Feb 2008 14:12:48 -0800" Date: Mon, 18 Feb 2008 22:17:51 +0000 Message-ID: <38866.1203373071@thrush.ravenbrook.com> Sender: nb@ravenbrook.com X-Virus-Scanned: ClamAV version 0.92, clamav-milter version 0.92 on raven.ravenbrook.com X-Virus-Status: Clean X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on raven.ravenbrook.com X-Spam-Level: X-Spam-Status: No, score=-4.2 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham version=3.2.3 Cc: freebsd-net@freebsd.org, Bill Moran Subject: Re: Multiple default routes on multihome host X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Feb 2008 22:18:06 -0000 At 2008-02-18 22:12:48+0000, Julian Elischer writes: > Unless you actually want all your machines to be remotely > accessible from the outside, you should probably just turn on > NAT on the new ISP interface, turn off the old one, and be > done with it. The machines I'm interested in for these purposes are all servers of one sort or another, which need to be externally routable. The desktops will indeed Just Work with NAT/DHCP. I'll look at the IPFW fwd rules. Thanks to all for your help. Nick B