From owner-freebsd-questions@FreeBSD.ORG  Fri Apr 25 02:31:04 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7E99D37B401
	for <freebsd-questions@freebsd.org>;
	Fri, 25 Apr 2003 02:31:04 -0700 (PDT)
Received: from mx1.lphp.org (APastourelles-107-1-17-67.abo.wanadoo.fr
	[81.48.127.67])	by mx1.FreeBSD.org (Postfix) with ESMTP id D31C843FB1
	for <freebsd-questions@freebsd.org>;
	Fri, 25 Apr 2003 02:31:02 -0700 (PDT)
	(envelope-from ajacoutot@lphp.org)
Received: from sta01 (sta01.lphp.org.local [192.168.0.4])
	by mx1.lphp.org (8.12.8p1/8.12.8) with ESMTP id h3P9V1ut018690
	for <freebsd-questions@freebsd.org>;
	Fri, 25 Apr 2003 11:31:01 +0200 (CEST)
	(envelope-from ajacoutot@lphp.org)
From: Antoine Jacoutot <ajacoutot@lphp.org>
To: freebsd-questions@freebsd.org
Date: Fri, 25 Apr 2003 11:31:01 +0200
User-Agent: KMail/1.5.1
MIME-Version: 1.0
Content-Type: text/plain;
  charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200304251131.01187.ajacoutot@lphp.org>
Subject: firewall pppoe and outside interface
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Apr 2003 09:31:04 -0000

Hi !

I have a little question. I am actually trying to configure a FreeBSD firewall 
(...still learning). I am connected to DSL with pppoe and I can't decide 
which is my outside interface.
Right now, everything is open and nat is working on the tun0 interface (the 
pppoe interface).
Here is the output of ifconfig:

ed0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        ether 52:54:00:e2:77:35
vr0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255
        ether 00:50:ba:1e:33:e0
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
lp0: flags=8810<POINTOPOINT,SIMPLEX,MULTICAST> mtu 1500
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
        inet 127.0.0.1 netmask 0xff000000
ppp0: flags=8010<POINTOPOINT,MULTICAST> mtu 1500
sl0: flags=c010<POINTOPOINT,LINK2,MULTICAST> mtu 552
faith0: flags=8002<BROADCAST,MULTICAST> mtu 1500
tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1492
        inet xxx.xxx.xxx.xxx --> xxx.xxx.xxx.xxx netmask 0xffffffff
        Opened by PID 15147

The DSL modem is plugged into ed0 (which does not have @ip since it's pppoe, 
it doesn't need one). So should I considere my outside interface as tun0 or 
ed0 ? The natd interface is tun0, that I know.

Thanks for any hints.

Antoine