From owner-freebsd-questions@FreeBSD.ORG Fri Jun 29 20:46:17 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 7D1D916A468 for ; Fri, 29 Jun 2007 20:46:17 +0000 (UTC) (envelope-from slogster@gmail.com) Received: from smtp.studnetz.uni-leipzig.de (smtp.studnetz.uni-leipzig.de [139.18.143.252]) by mx1.freebsd.org (Postfix) with ESMTP id 0EFDC13C45E for ; Fri, 29 Jun 2007 20:46:16 +0000 (UTC) (envelope-from slogster@gmail.com) Received: from localhost (localhost [127.0.0.1]) by smtp.studnetz.uni-leipzig.de (Postfix) with ESMTP id CD01D278; Fri, 29 Jun 2007 22:46:15 +0200 (CEST) X-Virus-Scanned: by amavisd-new at studnetz-ul Received: from smtp.studnetz.uni-leipzig.de ([127.0.0.1]) by localhost (smtp.studnetz.uni-leipzig.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CMhRmTzv3DcE; Fri, 29 Jun 2007 22:46:15 +0200 (CEST) Received: from [192.168.63.2] (a144026.studnetz.uni-leipzig.de [139.18.144.26]) by smtp.studnetz.uni-leipzig.de (Postfix) with ESMTP id 3867E26D; Fri, 29 Jun 2007 22:46:14 +0200 (CEST) From: Momchil Ivanov To: freebsd-questions@freebsd.org Date: Fri, 29 Jun 2007 22:46:10 +0200 User-Agent: KMail/1.9.6 References: <5780.192.168.11.1.1183063250.squirrel@https://poczta.szalbot.homedns.org> <20070629170001.045ca190@localhost> <2449.192.168.11.1.1183101189.squirrel@https://poczta.szalbot.homedns.org> In-Reply-To: <2449.192.168.11.1.1183101189.squirrel@https://poczta.szalbot.homedns.org> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart2334682.u2GGgg7SGl"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200706292246.14511.slogster@gmail.com> Cc: zigniew szalbot , Norberto Meijome Subject: Re: freebsd / gateway / parental control X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Jun 2007 20:46:17 -0000 --nextPart2334682.u2GGgg7SGl Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Friday 29 June 2007 09:13:09 zigniew szalbot wrote: > > > > If you use the wireless in the DSL modem, you'll be bypassing the BSD > > server. > > Just one question here. If I plug the router to the lan NIC and configure > it to take DHCP and DNS settings from the BSD box, then the wireless will > not bypass the BSD machine, will it? > You can do it in the following ways: 1) Box with one NIC - connect the box to your home network - disable DSL router`s DHCP for your home network - start dhcpd on the box giving ip addresses to your home clients and tell= ing=20 them that the box itself is the gateway, run squid or whatever you want to= =20 capture your clients' traffic and filter them, then the box users the DSL=20 router for gateway - disadvantages: if your kids are smart they will just change their gatewa= y=20 so that it`s not the box, but the DSL router and override your filtering 2) Same as above, but say DSL`s home ip is 10.51.87.1 you give the box=20 10.51.87.2, then give the box another ip (alias) 10.37.6.1 and tell the dhc= pd=20 on the box to give ip adresses from the 10.37.6.0/24 network to the client.= =20 The idea is to use 2 networks, one box <-> clients, the other for dsl route= r=20 <-> box - disadvantages: again if your kids are smart they`ll just set themselves= =20 some static ip from the dsl router`s network and browse. They just have to= =20 figure out router`s ip and network :) as in the above case 3) Box with 2 NICs and wireless NIC - disable dsl router`s wireless NIC - connect dsl router to NIC1 on the box - connect NIC2 to home net - setup the box wireless as Access Point - bridge NIC2 and the wireless NIC on the box - run your filter 4) Forget about the DSL router. Box with wireless NIC, 1 NIC for home net, = 1=20 NIC for the DSL - same as above, just have to tell your box how to connect to your ISP =2D-=20 This correspondence is strictly confidential. Any screening, filtering and/or production for the purpose of public or otherwise disclosure is forbidden without written permission by the author signed above. If you are not the intended recipient, please immediately notify the sender and permanently delete any copies PGP KeyID: 0x3118168B Keyserver: pgp.mit.edu Key fingerprint BB50 2983 0714 36DC D02E =A0158A E03D 56DA 3118 168B =20 --nextPart2334682.u2GGgg7SGl Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (FreeBSD) iD8DBQBGhW+T4D1W2jEYFosRAtecAKCjcJullG9AenGKVf/zMiHER2l4aQCfbcTk eR5h3hsRjKks0pED7sLTZxk= =YJrO -----END PGP SIGNATURE----- --nextPart2334682.u2GGgg7SGl--