Date: Wed, 09 Sep 2009 20:03:32 +0100 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: Maxim Khitrov <mkhitrov@gmail.com> Cc: Free BSD Questions list <freebsd-questions@freebsd.org> Subject: Re: Correct way to configure an IP range for firewall Message-ID: <4AA7FC04.4040508@infracaninophile.co.uk> In-Reply-To: <26ddd1750909091144x447fb4bt93e4bdc56d7a9202@mail.gmail.com> References: <26ddd1750909091144x447fb4bt93e4bdc56d7a9202@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigFAA41C1651E04818BDE5C72B
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable
Maxim Khitrov wrote:
> Am I correct in assuming that I just need to add four
> ifconfig_vr0_alias[0-3] lines to rc.conf? What happens if in the
> future we get a much bigger IP block, is there a more efficient way of
> accomplishing the same thing? I don't actually want the firewall to
> consider itself the final destination for any of the additional IPs,
> it just needs to pass them to pf for nat and filtering.
Assuming your assigned network is 192.0.2.24/29:
ipv4_addrs_vr0=3D"192.0.2.25-30"
See rc.conf(5) for details.
Cheers,
Matthew
--=20
Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard
Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
Kent, CT11 9PW
--------------enigFAA41C1651E04818BDE5C72B
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.13 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEAREIAAYFAkqn/AsACgkQ8Mjk52CukIzKbQCfUyBrDTzAGOoNLQwYSi66fMyx
L+sAn1IDWwgVRqgvK5B8VXHihzyEUb1L
=XyZQ
-----END PGP SIGNATURE-----
--------------enigFAA41C1651E04818BDE5C72B--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4AA7FC04.4040508>