Date: Fri, 19 Dec 2008 10:19:31 +0700 (ICT) From: Olivier Nicole <on@cs.ait.ac.th> To: khoogc@singnet.com.sg Cc: freebsd-questions@freebsd.org Subject: Re: bridge ipfw also protect set Message-ID: <200812190319.mBJ3JVqL084737@banyan.cs.ait.ac.th> In-Reply-To: <20081219020810.GA60027@localhost.gateway.2wire.net> (message from KHOO Guan Chen on Fri, 19 Dec 2008 10:08:10 %2B0800) References: <20081219020810.GA60027@localhost.gateway.2wire.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi, > I want to give internet connectivity to a pc behind my Freebsd, which is > connected to an aDSL. I know I can add another card to my set and use > bridge+IPFW so that the behind pc is firewalled. But will this setup > also ensure that my Freebsd set is firewalled? Could now figure it out > reading the book and article. You don't want to use bridge! 1) as far as I remember, ipfw works poorly with bridge: it would filter only based on layer 2, not based on IP (need to confirm). 2) bridge means that packets traverse the FreeBSD machine without any modification (think of the bridge like a 2 ports Ethernet switch). Unless you use and ADSL modem (but then you can use a switch and connect your PC and your FreeBSD box each on one port of the switch) it will not work. If your FreeBSD machine is in charge of making the ADSL connection, it will not work. 3) as suggested in the prvious reply, you need some NAT and some routing in your FreeBSD machine. Routing is not bridge. Best regards, Olivier
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200812190319.mBJ3JVqL084737>