From owner-freebsd-questions Thu Apr 5 11:35: 1 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mta6.snfc21.pbi.net (mta6.snfc21.pbi.net [206.13.28.240]) by hub.freebsd.org (Postfix) with ESMTP id 763CC37B43E for ; Thu, 5 Apr 2001 11:34:57 -0700 (PDT) (envelope-from ksscendyn@yahoo.com) Received: from kurts-07wxp.yahoo.com ([64.161.89.218]) by mta6.snfc21.pbi.net (Sun Internet Mail Server sims.3.5.2000.01.05.12.18.p9) with ESMTP id <0GBC00FVG0XVNJ@mta6.snfc21.pbi.net> for freebsd-questions@freebsd.org; Thu, 5 Apr 2001 11:34:43 -0700 (PDT) Date: Thu, 05 Apr 2001 11:34:20 -0700 From: Kurtis Smith Subject: RE: Traffic shaping natd dhcp and ipfw In-reply-to: <001101c0bdfb$6fe25a00$c803a8c0@CSUMNER> X-Sender: ksscendyn@pop.mail.yahoo.com To: freebsd-questions@freebsd.org Message-id: <5.0.2.1.0.20010405113021.00a6fc00@pop.mail.yahoo.com> MIME-version: 1.0 X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Content-type: text/plain; charset="us-ascii"; format=flowed References: <008401c0bdf7$cfba03a0$0f01a8c0@phantom> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG ---snipped---- >Subject: Re: Traffic shaping natd dhcp and ipfw > > > > Well at my work they are wanting to block > > entire access including www, FTP, email for certain machines. > > I don't know why you're looking at DHCP and leases. > > Assuming your FreeBSD box is your gateway, you should be looking at >/etc/hosts.allow and /etc/hosts.deny I would think. > > Or, adding some rules to ipfw. > > I don't have any "links" to toss your way, but I'm sure 'man hosts' or >'man hosts.deny' etc may help. > >-Gerry Ok so what I could do then is stop the DHCPD service which would suck for more computers adding to the network but hey the employer wants to do it so F#@$ em. Then I could put each individual IP address in the /etc/hosts file right? Then go around to every machine and specify IP addresses and also a default gateway ? Or should I run a proxy and which one I have squid but do not know how to set it up right dam it I need a book heheheh. Also I could setup IPFW rules if I knew how.. Man dam it which one is best to do? I can't belive this Crap man unbelievable pain in the ass after all the work I've done too... -Kurt To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message