Date: Wed, 09 Sep 2009 20:03:32 +0100 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: Maxim Khitrov <mkhitrov@gmail.com> Cc: Free BSD Questions list <freebsd-questions@freebsd.org> Subject: Re: Correct way to configure an IP range for firewall Message-ID: <4AA7FC04.4040508@infracaninophile.co.uk> In-Reply-To: <26ddd1750909091144x447fb4bt93e4bdc56d7a9202@mail.gmail.com> References: <26ddd1750909091144x447fb4bt93e4bdc56d7a9202@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
Maxim Khitrov wrote:
> Am I correct in assuming that I just need to add four
> ifconfig_vr0_alias[0-3] lines to rc.conf? What happens if in the
> future we get a much bigger IP block, is there a more efficient way of
> accomplishing the same thing? I don't actually want the firewall to
> consider itself the final destination for any of the additional IPs,
> it just needs to pass them to pf for nat and filtering.
Assuming your assigned network is 192.0.2.24/29:
ipv4_addrs_vr0="192.0.2.25-30"
See rc.conf(5) for details.
Cheers,
Matthew
--
Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard
Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
Kent, CT11 9PW
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.13 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEAREIAAYFAkqn/AsACgkQ8Mjk52CukIzKbQCfUyBrDTzAGOoNLQwYSi66fMyx
L+sAn1IDWwgVRqgvK5B8VXHihzyEUb1L
=XyZQ
-----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4AA7FC04.4040508>