From owner-freebsd-questions@FreeBSD.ORG Fri Jul 30 13:20:07 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E734B16A4CE for ; Fri, 30 Jul 2004 13:20:07 +0000 (GMT) Received: from mta10.adelphia.net (mta10.adelphia.net [68.168.78.202]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9B23243D3F for ; Fri, 30 Jul 2004 13:20:07 +0000 (GMT) (envelope-from Barbish3@adelphia.net) Received: from barbish ([67.20.101.71]) by mta10.adelphia.net (InterMail vM.6.01.03.02 201-2131-111-104-20040324) with SMTP id <20040730131950.RZRV6319.mta10.adelphia.net@barbish>; Fri, 30 Jul 2004 09:19:50 -0400 From: "JJB" To: "James A. Coulter" , Date: Fri, 30 Jul 2004 09:19:49 -0400 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409 In-Reply-To: <002501c47634$f68031f0$6e01a8c0@sabrina> Importance: Normal Subject: RE: DHCP and the "SIMPLE" option in /etc/rc.firewall X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Barbish3@adelphia.net List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Jul 2004 13:20:08 -0000 The handbook Firewall section has been rewritten. It's temporally available from www.a1poweruser.com/FBSD_firewall/ as the Doc group works to sanitize the English. It incorporates the long awaited solution to getting ipfw + natd + stateful rules to function together, as well as OpenBSD pf firewall which is scheduled to become the third built in firewall software solution delivered with the FreeBSD install when 5.x ever makes it to the stable branch. -----Original Message----- From: owner-freebsd-questions@freebsd.org [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of James A. Coulter Sent: Friday, July 30, 2004 8:59 AM To: freebsd-questions@freebsd.org Subject: DHCP and the "SIMPLE" option in /etc/rc.firewall I am setting up a firewall for a gateway/router running FreeBSD 4.10. This is for a small home LAN. I have already compiled and installed a custom kernel with the IPFIREWALL and IPDIVERT options and configured the firewall to pass any to any without any problems - now it's time to start locking it down. I would like to use the firewall_type="SIMPLE" option rc.conf. But I'm not sure how I should set up my external nic in /etc/rc.firewall, i.e: # set these to your outside interface network and netmask and ip oif="ed0" onet="192.0.2.0" omask="255.255.255.240" oip="192.0.2.1" My outside interface is connected to a cable modem and is configured for DHCP Without a static IP address for my outside interface, how do I set these options? TIA for your help. Jim C. ----------------------------------- Check it out: The Black Dog Gallery http://polaris.umuc.edu/~jcoulter _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"