From owner-freebsd-security Fri Sep 15 17:16:11 2000 Delivered-To: freebsd-security@freebsd.org Received: from relay.butya.kz (butya-gw.butya.kz [212.154.129.94]) by hub.freebsd.org (Postfix) with ESMTP id DE26F37B422; Fri, 15 Sep 2000 17:16:05 -0700 (PDT) Received: by relay.butya.kz (Postfix, from userid 1000) id 02AB5287F4; Sat, 16 Sep 2000 07:16:01 +0700 (ALMST) Received: from localhost (localhost [127.0.0.1]) by relay.butya.kz (Postfix) with ESMTP id E85BE287F3; Sat, 16 Sep 2000 07:16:01 +0700 (ALMST) Date: Sat, 16 Sep 2000 07:16:01 +0700 (ALMST) From: Boris Popov To: Jeremy Norris Cc: security@FreeBSD.ORG, net@FreeBSD.ORG Subject: Re: ip filtering along side ipx In-Reply-To: <20000915170142.B321@telcomm.columbia.k12.mo.us> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri, 15 Sep 2000, Jeremy Norris wrote: > I'm attempting to implement a firewall in a building on our WAN using > ipfilter and 4.1-release. Since we are a Novell shop, it needs to be able to > route all the IPX traffic through untouched. I've read through the manpages > about IPXrouted, and also read through the info at > http://people.freebsd.org/~bp , but I'm not sure how to set it up correctly. > Can I ifconfig both ethernet interfaces with the same network number and enable > IPXrouted (along with ipxgateway enabled) or is it more complex? No, each interface should have its own IPX network number just like when you configure NetWare server with multiple ethernet adapaters. IPX traffic are not affected by IP filtering programms. -- Boris Popov http://www.butya.kz/~bp/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message