From owner-freebsd-questions@freebsd.org Thu Jul 11 14:10:01 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9441115D4470 for ; Thu, 11 Jul 2019 14:10:01 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) Received: from s1-b0c6.socketlabs.email-od.com (s1-b0c6.socketlabs.email-od.com [142.0.176.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 9A2DC80B99 for ; Thu, 11 Jul 2019 14:10:00 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) DKIM-Signature: v=1; a=rsa-sha256; d=email-od.com;i=@email-od.com;s=dkim; c=relaxed/relaxed; q=dns/txt; t=1562854200; x=1565446200; h=content-transfer-encoding:content-type:mime-version:references:in-reply-to:message-id:subject:to:from:date:x-thread-info; bh=o/tH/H8Y88DH4N8WUUcKrVI1dBtX0LOGuBWpR1MMx7s=; b=VghGQxMYcRNm82TGk0yQ3s4If14EK7ofYEvfRfXzedz4LkJRc1IxyJ2XW3qUKgu7bJmbntYzvSbVW8nZO1qQYbARET3e5PoctIuwlcskswtadQf9r0vUlyH9Cvv5gbDen2EZvJ2TkF/Oaqjf0Pj47cqGz++isVvsu7IwQJw7XQE= X-Thread-Info: NDI1MC4xMi4xYjUwMDAwMDIyY2M1NDcuZnJlZWJzZC1xdWVzdGlvbnM9ZnJlZWJzZC5vcmc= Received: from r3.sg.in.socketlabs.com (r3.sg.in.socketlabs.com [142.0.179.13]) by mxsg2.email-od.com with ESMTP; Thu, 11 Jul 2019 09:09:39 -0400 Received: from smtp.lan.sohara.org (EMTPY [185.202.17.215]) by r3.sg.in.socketlabs.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Thu, 11 Jul 2019 09:09:39 -0400 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.91 (FreeBSD)) (envelope-from ) id 1hlYpN-000GMu-Nt for freebsd-questions@freebsd.org; Thu, 11 Jul 2019 14:09:37 +0100 Date: Thu, 11 Jul 2019 14:09:37 +0100 From: Steve O'Hara-Smith To: freebsd-questions@freebsd.org Subject: Re: Configuring as Router Message-Id: <20190711140937.7ae7204842838cca556bf11a@sohara.org> In-Reply-To: References: X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.32; amd64-portbld-freebsd12.0) X-Clacks-Overhead: "GNU Terry Pratchett" Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 9A2DC80B99 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=email-od.com header.s=dkim header.b=VghGQxMY; spf=pass (mx1.freebsd.org: domain of 4250.10.freebsd-questions=freebsd.org@email-od.com designates 142.0.176.198 as permitted sender) smtp.mailfrom=4250.10.freebsd-questions=freebsd.org@email-od.com X-Spamd-Result: default: False [-2.72 / 15.00]; R_SPF_ALLOW(-0.20)[+ip4:142.0.176.0/20]; MV_CASE(0.50)[]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; MX_GOOD(-0.01)[mxbh.socketlabs.com,mxbsg.socketlabs.com]; DKIM_TRACE(0.00)[email-od.com:+]; NEURAL_HAM_SHORT(-0.54)[-0.543,0]; FORGED_SENDER(0.00)[steve@sohara.org,4250.10.freebsd-questions=freebsd.org@email-od.com]; IP_SCORE(-0.21)[ip: (-0.56), ipnet: 142.0.176.0/22(-0.25), asn: 7381(-0.19), country: US(-0.06)]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:7381, ipnet:142.0.176.0/22, country:US]; RCVD_TLS_LAST(0.00)[]; FROM_NEQ_ENVFROM(0.00)[steve@sohara.org,4250.10.freebsd-questions=freebsd.org@email-od.com]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.96)[-0.959,0]; R_DKIM_ALLOW(-0.20)[email-od.com:s=dkim]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-0.999,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[sohara.org]; FORGED_SENDER_VERP_SRS(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_IN_DNSWL_NONE(0.00)[198.176.0.142.list.dnswl.org : 127.0.15.0]; ENVFROM_VERP(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jul 2019 14:10:01 -0000 On Thu, 11 Jul 2019 10:13:58 +0530 Vishwas Sabbani wrote: > I am using FreeBSD 12.0 release. I want to configure it as a router. I've There are a number of options depending on what kind of router you want. Assuming you mean a domestic or SOHO edge router to a service with a single IP allocation you will need to set up: NAT/Firewall: ipfw or pf can be used - there are many recipes online for pf configurations, just make sure you understand the one you use. DHCP/DNS: Install dnsmasq and set it up. Media server, 'personal cloud' and similar services can also be set up (many options), personally I like to keep my edge router down to routing, NAT and firewall and run all the services elsewhere on the LAN. -- Steve O'Hara-Smith