From owner-freebsd-questions  Fri Jun  2  8:26:35 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from ns2.jjsoft.com (fig2.figdav.com [208.152.114.19])
	by hub.freebsd.org (Postfix) with ESMTP id B335637BC75
	for <freebsd-questions@FreeBSD.ORG>; Fri,  2 Jun 2000 08:26:30 -0700 (PDT)
	(envelope-from jahanur@jjsoft.com)
Received: from ns2.jjsoft.com (ns2.jjsoft.com [208.152.114.19])
	by ns2.jjsoft.com (8.9.0/8.9.0) with SMTP id KAA18479;
	Fri, 2 Jun 2000 10:17:13 -0500 (CDT)
Date: Fri, 2 Jun 2000 10:17:13 -0500 (CDT)
From: Jahanur R Subedar <jahanur@jjsoft.com>
To: "Raymundo M. Vega" <RaymundoVega@home.com>
Cc: Jake Ott <jott@frii.net>, freebsd-questions@FreeBSD.ORG
Subject: Re: NAT/gated over 2 netcards
In-Reply-To: <3937575F.6F92CFC6@home.com>
Message-ID: <Pine.BSF.3.96.1000602101526.18449B-100000@ns2.jjsoft.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


You know I am trying so hard. I think you said the best answer. But let me
ask you one question. If I enable the gateway in r.conf then do I need to
also run gated or routed. 
Please help.
Thanks
Jahanur




On Thu, 1 Jun 2000, Raymundo M. Vega wrote:

> Jake Ott wrote:
> > 
> > I'm attempting something I thought to be fairly simple.  2 net cards, 1
> > outside ethernet, 1 internal (10.x.x.x) net.  IS this to much to ask?
> > 
> > I know some sort of ip masquarading (sp) is needed here, but i really have
> > no diea where to start.  Any help would be appreaciated.
> 
> you will have to run natd, in order to do this, you have to
> build a custom kernel with:
> options IPFIREWALL
> options IPDIVERT
> 
> make sure you have enabled your computer as gateway
> (in /etc/defaults/rc.conf)
> 
> make sure that in /etc/services there is a line like:
> natd	8668/divert
> 
> edit /etc/rc.firewall or if you are not interested in a firewall,
> change the name of the file and create a new one with
> 
> /sbin/ipfw -f flush
> /sbin/ipfw add divert natd all from any to any via ed0
> /sbin/ipfw add pass all from any to any
> 
> here i suppose ed0 is the "outer" nic, change if this is not true
> 
> if you use bourne shell and you are using the small rc.firewall:
> sh /etc/rc.firewall
> 
> now run natd:
> /usr/sbin/natd -n ed0
> 
> again i assume ed0 is the outer nic
> 
> \
> good luck
> 
> raymundo
> 
> > 
> > -Jake
> > 
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-questions" in the body of the message
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 

Jahanur R Subedar
WWW.JJSOFT.COM



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message