From owner-freebsd-questions@FreeBSD.ORG  Fri Jun 24 04:59:27 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0D66816A41F
	for <freebsd-questions@freebsd.org>;
	Fri, 24 Jun 2005 04:59:27 +0000 (GMT)
	(envelope-from dmitry.mityugov@gmail.com)
Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.201])
	by mx1.FreeBSD.org (Postfix) with ESMTP id BA35943D49
	for <freebsd-questions@freebsd.org>;
	Fri, 24 Jun 2005 04:59:26 +0000 (GMT)
	(envelope-from dmitry.mityugov@gmail.com)
Received: by wproxy.gmail.com with SMTP id 69so148390wri
	for <freebsd-questions@freebsd.org>;
	Thu, 23 Jun 2005 21:59:26 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
	b=WYHOP5q0wCOZGoIQY/zYrXUdzDTYaOM0FcAROLLeU64fUBDy8KDAnNGqFOAP6siC8SgvAIvy6dCii4PDH8Sxay/dwXrTMy2Fr2m6hoW3EOQDjEPkJ0Di1yxFbPF7iwVJhjNERyCff4WIp8BwUyIs2mn3DZk2rNtuI/Eojt4B/gg=
Received: by 10.54.42.17 with SMTP id p17mr1570833wrp;
	Thu, 23 Jun 2005 21:59:26 -0700 (PDT)
Received: by 10.54.56.33 with HTTP; Thu, 23 Jun 2005 21:59:26 -0700 (PDT)
Message-ID: <b7052e1e050623215936897bc7@mail.gmail.com>
Date: Fri, 24 Jun 2005 08:59:26 +0400
From: Dmitry Mityugov <dmitry.mityugov@gmail.com>
To: =?ISO-8859-1?Q?Bj=F6rn_K=F6nig?= <bkoenig@cs.tu-berlin.de>
In-Reply-To: <42BAA90E.3060309@cs.tu-berlin.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <42BAA0A9.3090808@aboutsupport.com>
	<42BAA90E.3060309@cs.tu-berlin.de>
Cc: Peter <peterpub1@aboutsupport.com>,
	"freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Subject: Re: Simple ipfw problem :(
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Dmitry Mityugov <dmitry.mityugov@gmail.com>
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Jun 2005 04:59:27 -0000

On 6/23/05, Bj=F6rn K=F6nig <bkoenig@cs.tu-berlin.de> wrote:
...
> Actually you don't need ipfw or any other packet filter to set up a
> simple internet access point for clients in a LAN. This configuration
> should be enough:
>=20
> ---- ppp.conf ----
> myisp:
>    set device PPPoE:<interface>
>    set log Phase IPCP CCP Warning Error Alert
>    add! default HISADDR
>    set authname <username>
>    set authkey <password>
> ----
> Note: <interface> is your external network interface, i.e. neither rl0
> nor tun0.
>=20
> ---- rc.conf ----
> gateway_enable=3D"YES"     # "sysctl net.inet.ip.forwarding=3D1" at start=
up
> ppp_enable=3D"YES"
> ppp_mode=3D"ddial"
> ppp_profile=3D"myisp"
> ppp_nat=3D"YES"            # alternatively "nat enable yes" in ppp.conf
> ----
>=20
> I hope I didn't forget about something.

nat deny_incoming yes might be a good addition to this list.

--=20
Dmitry

"We live less by imagination than despite it" - Rockwell Kent, "N by E"