From owner-freebsd-pf@FreeBSD.ORG Sun Sep 30 17:44:33 2007 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DC31216A494 for ; Sun, 30 Sep 2007 17:44:33 +0000 (UTC) (envelope-from rcoleman@criticalmagic.com) Received: from smtp-auth.no-ip.com (smtp-auth.no-ip.com [204.16.252.95]) by mx1.freebsd.org (Postfix) with ESMTP id BBCF013C455 for ; Sun, 30 Sep 2007 17:44:33 +0000 (UTC) (envelope-from rcoleman@criticalmagic.com) X-No-IP: criticalmagic.com@noip-smtp X-Report-Spam-To: abuse@no-ip.com Received: from [172.16.0.12] (adsl-074-229-078-253.sip.asm.bellsouth.net [74.229.78.253]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) (Authenticated sender: criticalmagic.com@noip-smtp) by smtp-auth.no-ip.com (Postfix) with ESMTP id 3B84FBCF2; Sun, 30 Sep 2007 10:44:33 -0700 (PDT) Message-ID: <46FFE080.1000204@criticalmagic.com> Date: Sun, 30 Sep 2007 13:44:32 -0400 From: Richard Coleman Organization: Critical Magic, Inc. User-Agent: Thunderbird 1.5.0.13 (X11/20070824) MIME-Version: 1.0 To: BB References: <787dcac20709281303v6bbdd30bs44c5dd63002009fd@mail.gmail.com> In-Reply-To: <787dcac20709281303v6bbdd30bs44c5dd63002009fd@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: FreeBSD-pf mail list Subject: Re: FreeBSD bridge pf squid X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 30 Sep 2007 17:44:34 -0000 If you are willing to access the console for all changes, the bridging firewall does not need any ip addresses at all. It will be a pure layer 2 appliance. Richard Coleman rcoleman@criticalmagic.com BB wrote: > Would like to setup a Squid transparent proxy - > > > NET <-> COMCAST_CABLE_MODEM <-> FBSD_PROXY_BRIDGE <-> > NETGEAR_WIRELESS_ROUTER <-> LAN > > Little confused about bridging with or without IP's redirecting (rdr) to > localhost on port 3128 > > Does the FreeBSD box need to have IP's on the bridge interfaces? Would > prefer not to have any IP's on the bridge interfaces. > > Sorry if this has already been discussed, but it's not clear to me.