Date: Sat, 23 May 1998 23:27:15 -0700 (PDT) From: Doug White <dwhite@gdi.uoregon.edu> To: Capriotti <capriotti@geocities.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: IPFW and dial-up link to internet Message-ID: <Pine.BSF.3.96.980523232453.9142O-100000@gdi.uoregon.edu> In-Reply-To: <3.0.32.19691231210000.0094a9c0@pop.mpc.com.br>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 20 May 1998, Capriotti wrote:
> the connection works great and it was done "by the book", following
> instrucions at the ppp man pages and docs at FBSD site.
>
> The point I have to discuss is how to use IPFW with a dynamic IP environment.
>
> My doubt, basically is how to set up these lines:
>
> # set these to your outside interface network and netmask and ip
> oif="tun0" # I am using tun0 to connect
> onet="200.246.0.0" # My ISP's address is 200.246.0.252
> omask="255.255.255.0" # I guess this is right
> oip="192.168.4.17" # I have no idea what I should put here
>
>
> # set these to your inside interface network and netmask and ip
> iif="ed1" # my network card
> inet="192.168.0.0" # the internal network
> imask="255.255.255.0" # the mask seems to be ok also
> iip="192.168.0.30" # the internal IP
>
> Next I am using basically al the rules from "simple", at the rc.firewall
> file, plus a couple more to ensure that netbios is not being manipulated
> from outside, and also telnet will work within the LAN only.
>
> Could someon take a look at those lines and give me some advice ?
I would suggest reworking rc.firewall so that any references to
outside-net addresses be changed to `any' and any explicit references to
`via ${oif}' be removed. This generalizes things extensively. I assume
that this is okay with you.
The skeleton firewall config in rc.firewall assumes that you have a
bastion host on the outside that you need to have access to. If you don't
then you can be much more general in your rules.
Doug White | University of Oregon
Internet: dwhite@resnet.uoregon.edu | Residence Networking Assistant
http://gladstone.uoregon.edu/~dwhite | Computer Science Major
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980523232453.9142O-100000>