From owner-freebsd-questions@FreeBSD.ORG Fri Oct 8 10:01:45 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9E43A16A4CE for ; Fri, 8 Oct 2004 10:01:45 +0000 (GMT) Received: from mproxy.gmail.com (rproxy.gmail.com [64.233.170.201]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2EAA043D41 for ; Fri, 8 Oct 2004 10:01:45 +0000 (GMT) (envelope-from david.jenkins@gmail.com) Received: by mproxy.gmail.com with SMTP id 73so19596rnl for ; Fri, 08 Oct 2004 03:01:44 -0700 (PDT) Received: by 10.38.13.47 with SMTP id 47mr47365rnm; Fri, 08 Oct 2004 03:01:44 -0700 (PDT) Received: by 10.38.208.34 with HTTP; Fri, 8 Oct 2004 03:01:44 -0700 (PDT) Message-ID: <9395922d04100803011bd5a6c3@mail.gmail.com> Date: Fri, 8 Oct 2004 11:01:44 +0100 From: David Jenkins To: questions@freebsd.org In-Reply-To: <20041008111716.F17766@mirrorball.thelosingend.net> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit References: <20041008111716.F17766@mirrorball.thelosingend.net> Subject: Re: Network setup X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: David Jenkins List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Oct 2004 10:01:45 -0000 On Fri, 8 Oct 2004 11:51:53 +0200 (CEST), Svein Halvor Halvorsen wrote: > > At home I have in my network: > > - A FreeBSD server > - A FreeBSD workstation > - A Windows gaming box > - A FreeBSD laptop > - A friend's backup server > > All are connected to a switch witch in turn is connected to the internett. > I have real ethernet comming into my house, and all my machines have > public IP-addresses which are handed out by a DHCP server outside of my > control. > > Since my ISP have started to enforce soft bandwidth limiting, with the > consequence of losing my connection for 48 hours if exceeded, I need some > mean to count my traffic. Only traffic outside the subnet is counted. > > I therefore thought I could put another FreeBSD machine between my switch > and the internet, which counts traffic (and also acts as a firewall). > However, I can not afford to get another box to do this. So I thought I > could use the server. I also want to put a wireless card in the firewall > to allow me to move around with my laptop. Something like this: > > Internet > > | > | > | > --------------- > | fxp0 | > | | -------------- > | FBSD Server | ) ) ) | Laptop | > | | 802.11 | FreeBSD | > | fxp1 | -------------- > --------------- > | > ---------- > | Switch | > ---------- > | > ------------------------------- > | | | > ----------------- | ----------------- > | Workstation 1 | | | Workstation 2 | > | FreeBSD | | | Windows | > ----------------- | ----------------- > | > ------------------- > | Friend's server | > | FreeBSD | > ------------------- > > I'd like the possibility to have the workstations on the public internet > (with public IP-addresses handed out by my ISP's DHCP sever). I must admit > I'm out of my league here, but I guess I'd like the FBSD server to be > invisible for the workstations and the backup server, but still be able > analyse the IP-traffic. Is this possible? Does this kind of setup have a > name, for which I can google? > > If this is impossible, I guess I could setup NAT on the server/firewall, > and forward a couple of ports to the server behind the firewall. > > The issue is that all the traffic needs to be counted, and at least two > machines needs to be visible on the public internet. Additionally I'd like > to have a wireless connection for my laptop. I guess an ad-hoc setup would > do for this? > > SVein Halvor > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > Hi Svein, I *think* you might need to setup a network bridge. http://www.freebsd.org/doc/en_US.ISO8859-1/articles/filtering-bridges/index.html Hope this helps. David