From owner-freebsd-questions  Wed May 30 16:24:40 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from opus.sandiegoca.ncr.com (tan7.ncr.com [192.127.94.7])
	by hub.freebsd.org (Postfix) with ESMTP id 171AB37B423
	for <questions@FreeBSD.ORG>; Wed, 30 May 2001 16:24:37 -0700 (PDT)
	(envelope-from chuckr@opus.sandiegoca.ncr.com)
Received: from localhost (chuckr@localhost)
	by opus.sandiegoca.ncr.com (8.11.1/8.11.1) with ESMTP id f4UNReW40977;
	Wed, 30 May 2001 16:27:41 -0700 (PDT)
	(envelope-from chuckr@opus.sandiegoca.ncr.com)
Date: Wed, 30 May 2001 16:27:40 -0700 (PDT)
From: Chuck Rouillard <chuckr@opus.sandiegoca.ncr.com>
To: Jason Borkowsky <jcborkow@tcpns.com>
Cc: <questions@FreeBSD.ORG>
Subject: Re: DHCP and IPFW
In-Reply-To: <Pine.BSF.4.21.0105301411440.44433-100000@bemused.tcpns.com>
Message-ID: <Pine.BSF.4.31.0105301604250.40943-100000@opus.sandiegoca.ncr.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


On Wed, 30 May 2001, Jason Borkowsky wrote:

>
> Does anyone have an example of their IPFW ruleset that integrates DHCP? I
> am trying to figure out the simplest, yet securest, way to do this. Thank
> you!
[snip]

I'm guessing IP changes are central to this question.
If so, configure your ruleset(s) using variables. For
example:

oif="ed0"
iif="ed1"
dns0="xxx.xxx.xxx.xxx"
dns1="yyy.yyy.yyy.yyy"

and possibly:

dhcp0="zzz.zzz.zzz.zzz"
...

Then, specify interfaces and IPs like ${oif}, ${iif},
and ${dns0} in your ruleset(s).


.cr



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message