From owner-freebsd-questions@FreeBSD.ORG  Wed Oct 15 10:38:24 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id C8C8C106568B
	for <freebsd-questions@freebsd.org>;
	Wed, 15 Oct 2008 10:38:24 +0000 (UTC)
	(envelope-from rock_on_the_web@comcen.com.au)
Received: from mail.unitedinsong.com.au
	(202-172-126-254.cpe.qld-1.comcen.com.au [202.172.126.254])
	by mx1.freebsd.org (Postfix) with ESMTP id 79BDB8FC28
	for <freebsd-questions@freebsd.org>;
	Wed, 15 Oct 2008 10:38:24 +0000 (UTC)
	(envelope-from rock_on_the_web@comcen.com.au)
Received: from [192.168.0.185] (unknown [192.168.0.185])
	by mail.unitedinsong.com.au (Postfix) with ESMTP id 5491E4069
	for <freebsd-questions@freebsd.org>;
	Wed, 15 Oct 2008 20:38:33 +1000 (EST)
From: Da Rock <rock_on_the_web@comcen.com.au>
To: freebsd-questions@freebsd.org
In-Reply-To: <gd1t24$q3s$1@ger.gmane.org>
References: <48F43EB1.40304@gmail.com> <gd1mi1$5tl$1@ger.gmane.org>
	<20081014101733.GA47158@icarus.home.lan> <gd1t24$q3s$1@ger.gmane.org>
Content-Type: text/plain
Date: Wed, 15 Oct 2008 20:40:48 +1000
Message-Id: <1224067248.3458.34.camel@laptop1.herveybayaustralia.com.au>
Mime-Version: 1.0
X-Mailer: Evolution 2.12.3 (2.12.3-5.fc8) 
Content-Transfer-Encoding: 7bit
Subject: Re: How to get my Dad's Win2k system to access internet through my
	FreeBSD 6.2 system
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Oct 2008 10:38:24 -0000


On Tue, 2008-10-14 at 06:46 -0400, Michael Powell wrote:
> Jeremy Chadwick wrote:
> 
> > On Tue, Oct 14, 2008 at 04:55:11AM -0400, Michael Powell wrote:
> [snip] 
> >> Next, you will want to configure your FreeBSD machine as a NAT gateway.
> >> In your /etc/rc.conf you will want something like gateway_enable="YES"
> >> and some form of firewall initialization[1]. The gateway_enable is what
> >> allows the forwarding of packets between your rl0 and your rl1, but the
> >> activation of NAT functionality is usually a function contained within a
> >> firewall. So conceptually, the firewall will be "in between" rl0 and rl1.
> >> 
> >> There are three different firewalls you can choose from. Configuring the
> >> firewall is usually where the inexperienced get stuck. This subject
> >> material is beyond the scope of this missive, and you would do well to
> >> start reading in the Handbook. But essentially, when you configure NAT in
> >> the firewall your rl0 (connected to the ISP) will be assigned a "Public"
> >> IP address and the NAT function will translate between "Public" and
> >> "Private".
> 
> With respect to "NAT", the caveat here is the assumption that your DSL/Cable
> modem is *not* already performing NAT. The situation you do not want to get
> into is having *two* NATs. The content herein is assuming that the external
> (rl0) interface is getting assigned a "Public" IP from the ISP. 
>  

If this is the case wouldn't the OP set router_enable=YES instead of
gateway?