From owner-freebsd-questions Tue Jan 2 14:38:43 2001 From owner-freebsd-questions@FreeBSD.ORG Tue Jan 2 14:38:41 2001 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from xena.gsicomp.on.ca (cr677933-a.ktchnr1.on.wave.home.com [24.43.230.149]) by hub.freebsd.org (Postfix) with ESMTP id 7792A37B400 for ; Tue, 2 Jan 2001 14:38:40 -0800 (PST) Received: from hermes (hermes.gsicomp.on.ca [192.168.0.18]) by xena.gsicomp.on.ca (8.9.3/8.9.3) with SMTP id RAA32727 for ; Tue, 2 Jan 2001 17:38:06 -0500 (EST) (envelope-from matt@gsicomp.on.ca) Message-ID: <003801c0750d$2b0b7650$1200a8c0@gsicomp.on.ca> From: "Matthew Emmerton" To: References: <14927.2712.916173.916547@Max.B2Pi.com> <20010103081434.B62613@itouchnz.itouch> <14930.11427.396120.786032@Max.B2Pi.com> <20010103084859.D62613@itouchnz.itouch> Subject: Re: Networking and forwarding woes Date: Tue, 2 Jan 2001 17:41:37 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > > I'm absolutely certain that my shoes are down! I'm not real sure about > > anything else, other than the situation that I want is to use > > eventually is along the lines of > > > > +---------+ > > | | +---- 185 > > | | | > > 1 192 | | +---- 186 > > internet -----| de0 | | > > | | 188 +---- 187 > > | rl0 |---------+ > > | | +---- 189 > > | | | > > | | +---- 190 > > | | | > > +---------+ +---- 191 > > FreeBSD > > Hmm, could you please explain what sort of network solution you're > trying to achieve here? Maybe we (the list) could come up with an > alternative that would work. It looks like he's trying to make his FreeBSD machine be a firewall of some sort. The setup is similar to what most people with a single public IP do, except that he's using real IPs on the inside instead of using NAT + private IPs. Since he doesn't have a proper subnet (he's got a /29 subnet shifted by one), doing anything using routed is out of the question. I imagine something could be concocted using natd/ipfw, but it would be very complicated, to say the least. -- Matt Emmerton To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message