From owner-freebsd-questions@FreeBSD.ORG Tue Oct 14 10:46:28 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 602A0106568E for ; Tue, 14 Oct 2008 10:46:28 +0000 (UTC) (envelope-from jdc@koitsu.dyndns.org) Received: from QMTA04.emeryville.ca.mail.comcast.net (qmta04.emeryville.ca.mail.comcast.net [76.96.30.40]) by mx1.freebsd.org (Postfix) with ESMTP id 443BB8FC13 for ; Tue, 14 Oct 2008 10:46:28 +0000 (UTC) (envelope-from jdc@koitsu.dyndns.org) Received: from OMTA08.emeryville.ca.mail.comcast.net ([76.96.30.12]) by QMTA04.emeryville.ca.mail.comcast.net with comcast id SaUi1a0010FhH24A4amTcp; Tue, 14 Oct 2008 10:46:27 +0000 Received: from koitsu.dyndns.org ([69.181.141.110]) by OMTA08.emeryville.ca.mail.comcast.net with comcast id SamS1a00A2P6wsM8UamTf2; Tue, 14 Oct 2008 10:46:27 +0000 X-Authority-Analysis: v=1.0 c=1 a=Hhtsdv2kQ0QA:10 a=7q5sDk5WlpcA:10 a=QycZ5dHgAAAA:8 a=xDIseQjkeyA5HJBJ-vwA:9 a=I0kbIPxMmSBpdVvmDd0A:7 a=tsT2ypEekSmhHGT4ZaztLRT3JyEA:4 a=EoioJ0NPDVgA:10 a=LY0hPdMaydYA:10 Received: by icarus.home.lan (Postfix, from userid 1000) id D3DC2C9419; Tue, 14 Oct 2008 03:46:26 -0700 (PDT) Date: Tue, 14 Oct 2008 03:46:26 -0700 From: Jeremy Chadwick To: Michael Powell Message-ID: <20081014104626.GA47785@icarus.home.lan> References: <48F43EB1.40304@gmail.com> <20081014101733.GA47158@icarus.home.lan> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.18 (2008-05-17) Cc: freebsd-questions@freebsd.org Subject: Re: How to get my Dad's Win2k system to access internet through my FreeBSD 6.2 system X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Oct 2008 10:46:28 -0000 On Tue, Oct 14, 2008 at 06:46:10AM -0400, Michael Powell wrote: > Jeremy Chadwick wrote: > > > On Tue, Oct 14, 2008 at 04:55:11AM -0400, Michael Powell wrote: > [snip] > >> Next, you will want to configure your FreeBSD machine as a NAT gateway. > >> In your /etc/rc.conf you will want something like gateway_enable="YES" > >> and some form of firewall initialization[1]. The gateway_enable is what > >> allows the forwarding of packets between your rl0 and your rl1, but the > >> activation of NAT functionality is usually a function contained within a > >> firewall. So conceptually, the firewall will be "in between" rl0 and rl1. > >> > >> There are three different firewalls you can choose from. Configuring the > >> firewall is usually where the inexperienced get stuck. This subject > >> material is beyond the scope of this missive, and you would do well to > >> start reading in the Handbook. But essentially, when you configure NAT in > >> the firewall your rl0 (connected to the ISP) will be assigned a "Public" > >> IP address and the NAT function will translate between "Public" and > >> "Private". > > With respect to "NAT", the caveat here is the assumption that your DSL/Cable > modem is *not* already performing NAT. The situation you do not want to get > into is having *two* NATs. The content herein is assuming that the external > (rl0) interface is getting assigned a "Public" IP from the ISP. > > [snip] > > > > Doesn't he need to also set sysctl net.inet.ip.forwarding=1 for his > > box to act as a gateway? Or is this handled by the NAT portion? > > > The gateway_enable="YES" in /etc/rc.conf sets this. Right, but it wasn't in your /etc/rc.conf example (see your mail), so I figured the OP would come back saying "Okay I did what you said but it still doesn't work!" -- | Jeremy Chadwick jdc at parodius.com | | Parodius Networking http://www.parodius.com/ | | UNIX Systems Administrator Mountain View, CA, USA | | Making life hard for others since 1977. PGP: 4BD6C0CB |