From owner-freebsd-questions@FreeBSD.ORG  Fri Dec 12 19:42:16 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3353416A4CE
	for <questions@freebsd.org>; Fri, 12 Dec 2003 19:42:16 -0800 (PST)
Received: from out005.verizon.net (out005pub.verizon.net [206.46.170.143])
	by mx1.FreeBSD.org (Postfix) with ESMTP id EF66043D48
	for <questions@freebsd.org>; Fri, 12 Dec 2003 19:42:13 -0800 (PST)
	(envelope-from mike@pcmedx.com)
Received: from duron.pcmedx.com ([4.46.22.189]) by out005.verizon.net
          (InterMail vM.5.01.06.06 201-253-122-130-106-20030910) with ESMTP
          id <20031213034213.RWFU16040.out005.verizon.net@duron.pcmedx.com>;
          Fri, 12 Dec 2003 21:42:13 -0600
Received: from localhost (localhost [127.0.0.1])
	by duron.pcmedx.com (Postfix) with ESMTP
	id 66C4CB0CA; Fri, 12 Dec 2003 19:42:10 -0800 (PST)
Received: from mike (mike.pcmedx.com [192.168.240.244])
	by duron.pcmedx.com (Postfix) with SMTP
	id C331FACC8; Fri, 12 Dec 2003 19:42:09 -0800 (PST)
Message-ID: <02cc01c3c12b$2c81bb80$f4f0a8c0@pcmedx.com>
From: "Mike Maltese" <mike@pcmedx.com>
To: <questions@freebsd.org>
References: <3FDA7D20.1010904@cal.berkeley.edu>
Date: Fri, 12 Dec 2003 19:42:46 -0800
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
x-mimeole: Produced By Microsoft MimeOLE V6.00.2800.1165
X-Virus-Scanned: by amavisd (http://www.amavis.org) and f-prot
	(http://www.f-prot.com) at pcmedx.com
X-Authentication-Info: Submitted using SMTP AUTH at out005.verizon.net from
	[4.46.22.189] at Fri, 12 Dec 2003 21:42:10 -0600
cc: Rishi Chopra <rchopra@cal.berkeley.edu>
Subject: Re: (Yet Another) Home Networking Question
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 13 Dec 2003 03:42:16 -0000

> (1) in /etc/rc.conf, I added the following
>   natd_enable="YES"
>   natd_interface="rl0" ### public interface connected to cable modem
>   gateway_enable="YES"
>   defaultrouter="192.168.0.1" ###  LAN machines use this
>   ifconfig_rl0="DHCP"  ### Astound uses dhcp
>   ifconfig_rl1="inet 192.168.0.1 netmask 255.255.255.0" ### use for LAN
>   hostname="idfubar.dyndns.org"

As a first step, try adding these lines to rc.conf:

firewall_enable="YES"
firewall_type="open"

This will enable diversion of all traffic to natd. Read the man pages for
natd and ipfw and
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html
for more information.

The easiest way to reinitialize the system is to type "shutdown now". This
will drop you into single user mode. Press return when prompted for a shell.
Hit Ctrl+D and the rc system will be run through and put you back into
multi-user mode. Check for connectivity from the router and the Windows box.

As a side note, you can delete the defaultrouter entry. That's for your
FreeBSD box, not LAN clients. It's getting reset by dhclient when it gets
lease information from your ISP's DHCP server anyway.