From owner-freebsd-questions  Fri Sep 22 23: 1:18 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from mailhost01.reflexnet.net (mailhost01.reflexnet.net [64.6.192.82])
	by hub.freebsd.org (Postfix) with ESMTP id 8AEFB37B424
	for <questions@freebsd.org>; Fri, 22 Sep 2000 23:01:16 -0700 (PDT)
Received: from 149.211.6.64.reflexcom.com ([64.6.211.149]) by mailhost01.reflexnet.net  with Microsoft SMTPSVC(5.5.1877.197.19);
	 Fri, 22 Sep 2000 23:00:06 -0700
Received: (from cjc@localhost)
	by 149.211.6.64.reflexcom.com (8.11.0/8.11.0) id e8N61Ep42478;
	Fri, 22 Sep 2000 23:01:14 -0700 (PDT)
	(envelope-from cjc)
Date: Fri, 22 Sep 2000 23:01:14 -0700
From: "Crist J . Clark" <cjclark@reflexnet.net>
To: Martin Moeller <martian@t-online.de>
Cc: questions@FreeBSD.ORG
Subject: Re: IP masquerading
Message-ID: <20000922230114.K367@149.211.6.64.reflexcom.com>
Reply-To: cjclark@alum.mit.edu
References: <20000922100824.A163@theol.phicom.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0i
In-Reply-To: <20000922100824.A163@theol.phicom.net>; from martian@t-online.de on Fri, Sep 22, 2000 at 10:08:24AM +0200
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Fri, Sep 22, 2000 at 10:08:24AM +0200, Martin Moeller wrote:
> Let me (newbie) proudly tell you that I've succeeded in configuring
> my ISDN connection! :)) Wow, that was not as simple as I thought
> but it was fun!
> 
> And now I'm heading towards new adventures:
> 
> I still have two OS/2 machines that I want to connect to the
> internet via the FreeBSD box. This is my network configuration:
> 
> FreeBSD:   ed0 (192.168.1.2) -> local
>            isp0 (0.0.0.0 [dynamically assigned]) -> world
> Warp_1:    eth0 (192.168.1.1)
> Warp_2:    eth0 (192.168.1.3)
> 
> I've already found out that I have to use the
> IPFIREWALL, IPDIVERT, (IPFIREWALL_DEFAULT_TO_ACCEPT)
> kernel options.        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Not needed. Avoid. Other ones are good. You probably want to add
IPFIREWALL_VERBOSE and IPFIREWALL_VERBOSE_LIMIT too.

> I've never configured a firewall before. What rules
> do I have to set?

When getting things up and running, just use,

  firewall_enable="YES"
  firewall_type="open"
  natd_enable="YES"
  natd_interface="isp0"
  gateway_enable="YES"

And the default firewall config should be fine assuming you get your
interfaces right and all. Once you verify that works, start
customizing /etc/rc.firewall. 

> If there's any IP masquerading crack out there,
> who can help me start going, please do so... :)

"IP masquerading?" What's that? You mean NAT?
-- 
Crist J. Clark                           cjclark@alum.mit.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message