Date: Mon, 13 Jul 1998 22:41:36 +0200 From: Palle Girgensohn <girgen@partitur.se> To: charlespeters@chickenbean.com Cc: questions@FreeBSD.ORG Subject: Re: Dual Hommed Gateway (ipfw and natd) Message-ID: <35AA7100.CA51D722@partitur.se> References: <3.0.3.32.19980713112139.00700204@mail.plstn1.sfba.home.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.
--------------5AA7884AB8CBC295EE32AFE3
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Hi,
There are some resent changes in the natd man page, that clears a few
question marks out. I enclose it as an attachment.
view it with "groff -Tascii -man natd.8"
Ludwig Pummer wrote:
>
> At 01:46 PM 7/13/98 -0400, charlespeters@chickenbean.com wrote:
> All this stuff I cut out looks alright.
>
> >I would also like to set up a firewall to protect my network (local) from
> >outsiders, but I guess that I should get the router thing working first. I
> >have read the man ipfw and man natd, but they are not much help to me.
>
> don't worry about ipfw just yet. However, the natd manpage does have a
> step-by-step. Be sure to scroll down to "RUNNING NATD"
> 1. get freebsd 2.2 or higher
> 2. build a custom kernel with "options IPFIREWALL" and "options IPDIVERT".
> refer to the handbook on how to build a custom kernel
> 3. make sure gateway_enable=yes in your rc.conf (yours is)
> 4. make soure your interface is already configured (meaning its IP is set)
> 5. create an entry in /etc/services "natd 6668/divert # natd et"
^^^^
||||
In newer revisions (2.2-stable), the port number is changed: 6668->8668.
You're probably better off using the fresh number; will make it easier
to upgrade. The fresh /etc/services has this number already (Also see
gnats pr docs/7250). It will work fine with 6668 too though, for now.
> 6. run "natd -interface ed0" (for you the interface would be "de1")
Hmm, I'd say de0.
see the attached man natd:
...
-n | -interface interface
Use interface to determine the alias address. If there is a
possibility that the IP number associated with interface may
change, the -dynamic flag should also be used. If this op-
tion is not specified, the -a or -alias_address flag must be
used.
The specified interface must be the public network interface.
...
^^^^^^^^^^^^^^^^^^^^^^^^
The last line was added pretty resently, and it's absence gave me a
headache :-)
> 7. edit your rc.firewall rule to add "/sbin/ipfw add divert natd all from
> any to any via ed0". for you, you would go down to about line 72 and add "
> $fwcmd add divert natd all from any to any via de1"
Same here, de0.
> 8. enable your firewall by setting "firewall_enable=YES" in your rc.conf
> (you already have)
>
> that should be it! if you have trouble, its good to have bpfilter
> pseuo-devices built into your kernel (the handbook covers this) so that
> you can use tcpdump to see which packets are going where and from whom.
>
> >
> >I am also very new to this, but I am learning. I would appreciate as much
> >help as possible, as I have spent the better part of last week on this
> >problem, and my deadline is getting near.
> >
Same here. natd works for me now, so if you still have problems, please
feel free to mail me.
/Palle
--------------5AA7884AB8CBC295EE32AFE3
Content-Type: application/octet-stream; name="natd.8"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="natd.8"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--------------5AA7884AB8CBC295EE32AFE3--
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?35AA7100.CA51D722>