From owner-freebsd-questions@FreeBSD.ORG Tue Apr 19 16:19:49 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3F10316A4CE for ; Tue, 19 Apr 2005 16:19:49 +0000 (GMT) Received: from mail26.sea5.speakeasy.net (mail26.sea5.speakeasy.net [69.17.117.28]) by mx1.FreeBSD.org (Postfix) with ESMTP id EBE6E43D39 for ; Tue, 19 Apr 2005 16:19:48 +0000 (GMT) (envelope-from omniBSD@speakeasy.net) Received: (qmail 16648 invoked from network); 19 Apr 2005 16:19:48 -0000 Received: from acute.anhedonia.com (HELO [10.20.30.10]) (omni@[66.93.24.213]) (envelope-sender ) by mail26.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 19 Apr 2005 16:19:48 -0000 Message-ID: <4265306A.7000207@speakeasy.net> Date: Tue, 19 Apr 2005 11:23:06 -0500 From: Ash User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.2) Gecko/20041104 Netscape/7.1 X-Accept-Language: en-us, en MIME-Version: 1.0 To: errmaker@mail.ru References: <42652A3B.2080502@mail.ru> In-Reply-To: <42652A3B.2080502@mail.ru> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-questions@freebsd.org Subject: Re: gateway troubles X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Apr 2005 16:19:49 -0000 Alex wrote: > hi ! > i have fbsd 5.3 router with gateway_enable="YES >>/etc/rc.conf > and 3 interfaces: > 1. xl0 (mynet) > 2. rl0 > 3. tun0 (internet) cuaa0 > > i need to get work router from mynet to rl0 net and internet . i want > to do that without natd but net.inet.ip.forwarding=1 work only on one > psihical interface :) i need to get work gateway between 3 interfaces . > what i need to do ? In order to route traffic between your local network and the Internet WITHOUT using NAT, then your ISP needs to assign a routeable public subnet to you as well as at least one address on a segment shared with one of their routers. Somehow, I get the feeling that this isn't the case so probably will need to use NAT. FreeBSD gives you a few choices when it comes to building a router/firewall box. As always the handbook is the best place to start: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html Incidentally, the handbook is available in multiple languages: http://www.freebsd.org/doc/ Good luck, -Ash