Date: Fri, 24 Jun 2005 08:59:26 +0400 From: Dmitry Mityugov <dmitry.mityugov@gmail.com> To: =?ISO-8859-1?Q?Bj=F6rn_K=F6nig?= <bkoenig@cs.tu-berlin.de> Cc: Peter <peterpub1@aboutsupport.com>, "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org> Subject: Re: Simple ipfw problem :( Message-ID: <b7052e1e050623215936897bc7@mail.gmail.com> In-Reply-To: <42BAA90E.3060309@cs.tu-berlin.de> References: <42BAA0A9.3090808@aboutsupport.com> <42BAA90E.3060309@cs.tu-berlin.de>
next in thread | previous in thread | raw e-mail | index | archive | help
On 6/23/05, Björn König <bkoenig@cs.tu-berlin.de> wrote: ... > Actually you don't need ipfw or any other packet filter to set up a > simple internet access point for clients in a LAN. This configuration > should be enough: > > ---- ppp.conf ---- > myisp: > set device PPPoE:<interface> > set log Phase IPCP CCP Warning Error Alert > add! default HISADDR > set authname <username> > set authkey <password> > ---- > Note: <interface> is your external network interface, i.e. neither rl0 > nor tun0. > > ---- rc.conf ---- > gateway_enable="YES" # "sysctl net.inet.ip.forwarding=1" at startup > ppp_enable="YES" > ppp_mode="ddial" > ppp_profile="myisp" > ppp_nat="YES" # alternatively "nat enable yes" in ppp.conf > ---- > > I hope I didn't forget about something. nat deny_incoming yes might be a good addition to this list. -- Dmitry "We live less by imagination than despite it" - Rockwell Kent, "N by E"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?b7052e1e050623215936897bc7>