Date: Fri, 10 Apr 1998 22:34:53 -0700 From: Arve Ronning <arve.ronning@ah.telia.no> To: Eric Feillant <Eric.Feillant@EUnet-Bretagne.fr> Cc: freebsd-isdn@FreeBSD.ORG Subject: Re: I4B & NAT Message-ID: <352F00FD.14AE@ah.telia.no>
next in thread | raw e-mail | index | archive | help
Eric Feillant wrote:
>
> Can u send me u'r config file ? ( Natd.cf, ipfw.cf or rc.firewall, etc...)
>
> Eric.
>
Ok...
------------- rc.firewall -------
# ISDN
/usr/sbin/natd -log -interface isppp0
/sbin/ifconfig isppp0 down
/sbin/ipfw -f flush
/sbin/ipfw add divert natd all from any to any via isppp0
/sbin/ipfw add pass all from any to any
---------------------------------
In case you need them, I also include rc.conf and isdnd.rc.
TIA & Regards
-Arve
------------- rc.conf -----------
#!/bin/sh
#
# This is rc.conf - a file full of useful variables that you can set
# to change the default startup behavior of your system.
#
# All arguments must be in double or single quotes.
#
# $Id: rc.conf,v 1.1.2.27 1997/10/18 10:07:26 jkh Exp $
##############################################################
### Important initial Boot-time options #####################
##############################################################
swapfile="NO" # Set to name of swapfile if aux swapfile desired.
apm_enable="NO" # Set to YES if you want APM enabled.
pccard_enable="NO" # Set to YES if you want to configure PCCARD devices.
pccard_mem="DEFAULT" # If pccard_enable=YES, this is card memory
address.
pccard_ifconfig="NO" # Specialized pccard ethernet configuration (or
NO).
local_startup="/usr/local/etc/rc.d /usr/X11R6/etc/rc.d" # startup script
dirs.
##############################################################
### Network configuration sub-section ######################
##############################################################
### Basic network options: ###
hostname="Gate.home.no" # Set this!
nisdomainname="NO" # Set to NIS domain if using NIS (or NO).
firewall_enable="YES" # ISDN # Set to YES to enable firewall
functionality
#firewall_type="UNKNOWN" # Firewall type (see /etc/rc.firewall)
firewall_type="OPEN" # ISDN
firewall_quiet="NO" # Set to YES to suppress rule display
tcp_extensions="YES" # Allow RFC1323 & RFC1644 extensions (or NO).
network_interfaces="ed1 isppp0 lo0" # List of network
interfaces(lo0=loopback).
ifconfig_ed1="inet 172.16.3.10 netmask 255.255.255.0"
ifconfig_isppp0="link1 0.0.0.0 0.0.0.1 netmask 0xffffff00 debug" # ISDN
ifconfig_lo0="inet 127.0.0.1" # default loopback device configuration.
#ifconfig_lo0_alias0="inet 127.0.0.254 netmask 0xffffffff" # Sample
alias entry.
### Network daemon (miscellaneous) & NFS options: ###
syslogd_enable="YES" # Run syslog daemon (or NO).
syslogd_flags="" # Flags to syslogd (if enabled).
inetd_enable="YES" # Run the network daemon displatcher (or NO).
inetd_flags="" # Optional flags to inetd.
named_enable="NO" # Run named, the DNS server (or NO).
named_flags="-b /etc/namedb/named.boot" # Flags to named (if enabled).
kerberos_server_enable="NO" # Run a kerberos master server (or NO).
rwhod_enable="NO" # Run the rwho daemon (or NO).
amd_enable="NO" # Run amd service with $amd_flags (or NO).
amd_flags="-a /net -c 1800 -k i386 -d my.domain -l syslog /host
/etc/amd.map"
nfs_client_enable="NO" # This host is an NFS client (or NO).
nfs_client_flags="-n 4" # Flags to nfsiod (if enabled).
nfs_server_enable="NO" # This host is an NFS server (or NO).
nfs_server_flags="-u -t 4" # Flags to nfsd (if enabled).
mountd_flags="-r" # Flags to mountd (if NFS server enabled).
nfs_reserved_port_only="NO" # Provide NFS only on secure port (or NO).
rpc_lockd_enable="NO" # Run NFS rpc.lockd (*broken!*) if nfs_server.
rpc_statd_enable="YES" # Run NFS rpc.statd if nfs_server (or NO).
portmap_enable="YES" # Run the portmapper service (or NO).
portmap_flags="" # Flags to portmap (if enabled).
xtend_enable="NO" # Run the X-10 power controller daemon.
xtend_flags="" # Flags to xtend (if enabled).
### Network Time Services options: ###
timed_enable="NO" # Run the time daemon (or NO).
timed_flags="" # Flags to timed (if enabled).
ntpdate_enable="NO" # Run the ntpdate to sync time (or NO).
ntpdate_flags="" # Flags to ntpdate (if enabled).
xntpd_enable="NO" # Run xntpd Network Time Protocol (or NO).
xntpd_flags="" # Flags to xntpd (if enabled).
tickadj_enable="NO" # Run tickadj (or NO).
tickadj_flags="-Aq" # Flags to tickadj (if enabled).
# Network Information Services (NIS) options: ###
nis_client_enable="NO" # We're an NIS client (or NO).
nis_client_flags="" # Flags to ypbind (if enabled).
nis_ypset_enable="NO" # Run ypset at boot time (or NO).
nis_ypset_flags="" # Flags to ypset (if enabled).
nis_server_enable="NO" # We're an NIS server (or NO).
nis_server_flags="" # Flags to ypserv (if enabled).
nis_ypxfrd_enable="NO" # Run rpc.ypxfrd at boot time (or NO).
nis_ypxfrd_flags="" # Flags to rpc.ypxfrd (if enabled).
nis_yppasswdd_enable="NO" # Run rpc.yppasswdd at boot time (or NO).
nis_yppasswdd_flags="" # Flags to rpc.yppasswdd (if enabled).
### Network routing options: ###
defaultrouter="NO" # Set to default gateway (or NO).
static_routes="" # Set to static route list (or leave empty).
gateway_enable="YES" # ISDN # Set to YES if this host will be a gateway.
router_enable="NO" # Set to YES to enable a routing daemon.
router="routed" # Name of routing daemon to use if enabled.
router_flags="-q" # Flags for routing daemon.
mrouted_enable="NO" # Do multicast routing (see /etc/mrouted.conf).
ipxgateway_enable="NO" # Set to YES to enable IPX routing.
ipxrouted_enable="NO" # Set to YES to run the IPX routing daemon.
ipxrouted_flags="" # Flags for IPX routing daemon.
arpproxy_all="" # obsolete kernel option ARP_PROXY_ALL equiv.
##############################################################
### System console options #################################
##############################################################
keymap="NO" # keymap in /usr/share/syscons/keymaps/* (or NO).
keyrate="NO" # keyboard rate to: slow, normal, fast (or NO).
keybell="NO" # bell to duration.pitch or normal or visual (or NO).
keychange="NO" # function keys default values (or NO).
cursor="NO" # cursor type {normal|blink|destructive} (or NO).
scrnmap="NO" # screen map in /usr/share/syscons/scrnmaps/* (or NO).
font8x16="NO" # font 8x16 from /usr/share/syscons/fonts/* (or NO).
font8x14="NO" # font 8x14 from /usr/share/syscons/fonts/* (or NO).
font8x8="NO" # font 8x8 from /usr/share/syscons/fonts/* (or NO).
blanktime="NO" # blank time (in seconds) or "NO" to turn it off.
saver="NO" # screen saver desired: blank/green/snake/star/NO.
moused_type="NO" # See man page for rc.conf(5) for available settings.
moused_port="/dev/cuaa0" # Set to your mouse port (required if mousetype
set).
moused_flags="" # Any additional flags to moused.
##############################################################
### Miscellaneous administrative options ###################
##############################################################
cron_enable="YES" # Run the periodic job daemon.
lpd_enable="NO" # Run the line printer daemon.
lpd_flags="" # Flags to lpd (if enabled).
sendmail_enable="YES" # Run the sendmail daemon (or NO).
sendmail_flags="-bd -q30m" # -bd is pretty mandatory.
dumpdev="NO" # Device name to crashdump to (if enabled).
check_quotas="NO" # Check quotas (or NO).
accounting_enable="NO" # Turn on process accounting (or NO).
ibcs2_enable="NO" # Ibcs2 (SCO) emulation loaded at startup (or NO).
linux_enable="NO" # Linux emulation loaded at startup (or NO).
rand_irqs="NO" # Stir the entropy pool (eg: "5 11" or NO).
##############################################################
### Allow local configuration override at the very end here ##
##############################################################
if [ -f /etc/rc.conf.local ]; then
. /etc/rc.conf.local
fi
---------------------------------
------------- isdnd.rc ----------
#=========================================================================
# SYSTEM section: isdnd global configuration parameters
#=========================================================================
system
useacctfile = yes # generate accouting info to file
acctall = on # generate info for everything
acctfile = /var/log/isdnd.acct # name & location of accounting file
rtprio = 25 # modify isdnd's priority
#=======================================================================
# sPPP
#======================================================================
entry
name = PPP
usrdevicename = isppp
usrdeviceunit = 0
isdncontroller = 0
isdnchannel = -1
local-phone-incoming = <my phonenumber>
local-phone-dialout = <my phonenumber>
remote-phone-dialout = <ISP's phonenumber>
remdial-handling = first
dialin-reaction = ignore
dialout-type = normal
b1protocol = hdlc
idletime-incoming = 240
idletime-outgoing = 30
ratetype = 0
unitlength = 60
unitlengthsrc = conf
dialretries = 3
dialrandincr = on
recoverytime = 25
usedown = off
downtries = 2
downtime = 30
---------------------------------
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isdn" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?352F00FD.14AE>