Date: Sun, 1 Jul 2001 00:20:18 -0400 From: Isaac Mushinsky <imush@mail.ru> To: tyler spivey <tspivey8@home.com>, "freebsd-questions" <freebsd-questions@freebsd.org> Subject: Re: how to setup natd under ipf? Message-ID: <01070100201800.73812@omsk.mushinsky.net> In-Reply-To: <200106302050.f5UKoRa00311@home.com> References: <200106302050.f5UKoRa00311@home.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Saturday 30 June 2001 16:50, you wrote:
> place cc me sicne i am not on this list.
> how do i get nat on ipf?
> it says unknown keyword map.
> map rl0 10.0.0.0/24 -> 0/32
> it worked under ipfw.
> and ihave natd_enable and all that in rc.conf.
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
In your kernel config file you shoud have
options=09 IPFIREWALL
options IPDIVERT
also possibly
options MROUTING
options IPFIREWALL_FORWARD
options IPV6FIREWALL
if not, recompile kernel with these.
Now use ipfw. For example, I have 2 ethernet cards on the firewall: rl0 g=
oes to DSL modem and dc0 to another box. For a wide open diversion use
$ ipfw -f flush
$ ipfw add divert 8668 all from any to any via rl0
$ ipfw add allow all from any to any
$ /sbin/natd
To set this up on boot, here is my rc.conf:
inetd_enable=3D"YES"
ifconfig_rl0=3D"inet xxx.xxx.xxx.xxx netmask 255.255.255.0" <<<< my s=
tatic IP address there
defaultrouter=3D"xxx.xxx.xxx.1" =
<<<< gateway from my ISP
tcp_extensions=3D"YES"
nisdomainname=3D"NO"
network_interfaces=3D"ppp0 rl0 dc0 lo0"
ifconfig_dc0=3D"inet 192.168.2.100 netmask 255.255.255.0"
ipv6_enable=3D"YES"
firewall_enable=3D"YES"
natd_program=3D"/sbin/natd"
natd_interface=3D"rl0"
natd_enable=3D"YES"
and rc.network:
/sbin/ipfw -f flush
/sbin/ipfw add divert 8668 all from any to any via rl0
/sbin/ipfw add allow all from any to any
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?01070100201800.73812>