From owner-freebsd-questions@FreeBSD.ORG Tue Oct 14 10:42:26 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 724601065690 for ; Tue, 14 Oct 2008 10:42:26 +0000 (UTC) (envelope-from freebsd-questions@m.gmane.org) Received: from ciao.gmane.org (main.gmane.org [80.91.229.2]) by mx1.freebsd.org (Postfix) with ESMTP id 2CB398FC21 for ; Tue, 14 Oct 2008 10:42:25 +0000 (UTC) (envelope-from freebsd-questions@m.gmane.org) Received: from list by ciao.gmane.org with local (Exim 4.43) id 1KphM6-0004nL-8F for freebsd-questions@freebsd.org; Tue, 14 Oct 2008 10:42:22 +0000 Received: from pool-138-88-129-188.esr.east.verizon.net ([138.88.129.188]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Tue, 14 Oct 2008 10:42:22 +0000 Received: from nightrecon by pool-138-88-129-188.esr.east.verizon.net with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Tue, 14 Oct 2008 10:42:22 +0000 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-questions@freebsd.org From: Michael Powell Date: Tue, 14 Oct 2008 06:46:10 -0400 Lines: 33 Message-ID: References: <48F43EB1.40304@gmail.com> <20081014101733.GA47158@icarus.home.lan> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7Bit X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: pool-138-88-129-188.esr.east.verizon.net Sender: news Subject: Re: How to get my Dad's Win2k system to access internet through my FreeBSD 6.2 system X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: nightrecon@verizon.net List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Oct 2008 10:42:26 -0000 Jeremy Chadwick wrote: > On Tue, Oct 14, 2008 at 04:55:11AM -0400, Michael Powell wrote: [snip] >> Next, you will want to configure your FreeBSD machine as a NAT gateway. >> In your /etc/rc.conf you will want something like gateway_enable="YES" >> and some form of firewall initialization[1]. The gateway_enable is what >> allows the forwarding of packets between your rl0 and your rl1, but the >> activation of NAT functionality is usually a function contained within a >> firewall. So conceptually, the firewall will be "in between" rl0 and rl1. >> >> There are three different firewalls you can choose from. Configuring the >> firewall is usually where the inexperienced get stuck. This subject >> material is beyond the scope of this missive, and you would do well to >> start reading in the Handbook. But essentially, when you configure NAT in >> the firewall your rl0 (connected to the ISP) will be assigned a "Public" >> IP address and the NAT function will translate between "Public" and >> "Private". With respect to "NAT", the caveat here is the assumption that your DSL/Cable modem is *not* already performing NAT. The situation you do not want to get into is having *two* NATs. The content herein is assuming that the external (rl0) interface is getting assigned a "Public" IP from the ISP. [snip] > > Doesn't he need to also set sysctl net.inet.ip.forwarding=1 for his > box to act as a gateway? Or is this handled by the NAT portion? > The gateway_enable="YES" in /etc/rc.conf sets this. -Mike