From owner-freebsd-isp  Tue Nov 13  4:28:56 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from web20104.mail.yahoo.com (web20104.mail.yahoo.com [216.136.226.41])
	by hub.freebsd.org (Postfix) with SMTP id DB6A337B445
	for <freebsd-isp@freebsd.org>; Tue, 13 Nov 2001 04:28:48 -0800 (PST)
Message-ID: <20011113122848.68215.qmail@web20104.mail.yahoo.com>
Received: from [193.227.212.160] by web20104.mail.yahoo.com via HTTP; Tue, 13 Nov 2001 13:28:48 CET
Date: Tue, 13 Nov 2001 13:28:48 +0100 (CET)
From: =?iso-8859-1?q?Fabrizio=20Ravazzini?= <freefabri@yahoo.it>
Subject: Nat Gateway Firewall rules
To: freebsd-isp@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hello all,I'm in this situation:

               Internet
                  |
                  |
                +---------+
                |fBSD Nat |
                |     Gw  |
                +---------+
                  |     |
              +-----+   |
              |Http |   |
              |Proxy|   |
              +-----+   |
                  |     |
                  |     | 
                  LAN   |DMZ    +-------+
                        +-------|Web srv|
                        |       +-------+
                        |       +--------+
                        +-------|Smtp srv|
                                |pop3    |
                                +--------+

The internal LAN goes on Internet only for http,ftp.
The Lan also goes on the Dmz to use the Web srv &
smtp,pop3.
The Web,smtp,pop3 are accessible from Internet by
clients.
I must provide a strong Firewall set of rules on the
nat, where can I find some docs to do such a thing?

______________________________________________________________________

Abbonati a Yahoo! ADSL con Atlanet!
Naviga su Internet ad alta velocitą, e senza limiti di tempo! 
Per saperne di pił vai alla pagina http://adsl.yahoo.it

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message