From owner-freebsd-questions Sun Oct 22 22:41:10 2000 Delivered-To: freebsd-questions@freebsd.org Received: from gus33.homeip.net (hybrid-024-221-140-147.az.sprintbbd.net [24.221.140.147]) by hub.freebsd.org (Postfix) with ESMTP id 0481937B479 for ; Sun, 22 Oct 2000 22:41:07 -0700 (PDT) Received: from localhost (kdavey@localhost [127.0.0.1]) by gus33.homeip.net (8.9.3/8.9.3/SuSE Linux 8.9.3-0.1) with ESMTP id WAA04356; Sun, 22 Oct 2000 22:23:22 -0700 Date: Sun, 22 Oct 2000 22:23:22 -0700 (MST) From: Keith Davey To: Don Sutter Cc: questions@FreeBSD.ORG Subject: Re: IP Aliasing and FreeBSD 4.1.1 In-Reply-To: <000d01c05c09$68bc3600$20180142@phx76216> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I did not hear any mention of running the natd daemon to do the translation. Are you running this daemon process? Keith Davey Tivoli Systems On Fri, 1 Dec 2000, Don Sutter wrote: > I am running a private network (192.168.x.x) and recently > added a high speed ethernet internet connection on a static > public IP address. I would like to set up IP Aliasing (so > all my private machines can access the internet) and setup > firewall protection for my private network. I bought a > Version 4 FreeBSD Power Pak and discovered that it contained > a 3rd Edition "Complete FreeBSD" book. A also downloaded > and installed the latest FreeBSD 4.1.1 in a multi homed > machine and I downloaded and printed the latest FreeBSD > Handbook. > > I figured out how to re-compile the kernel with "options > IPFIREWALL", "options IPDIVERT" and even figured out how to > get my sound card working but the description of rc.firewall > in my Version 3 Complete FreeBSD book looks quite different > than /etc/rc.firewall on my system. I thought I'd start by > adding the three lines at the top of page 507 to my > rc.firewall file but now I'm not sure of where to put them. > > /sbin/ipfw -f flush > /sbin/ipfw add divert natd all from any to any via ed0 > /sbin/ipfw add pass all from any to any > > I use ed0 instead of tun0 as used in the book. > > Am I looking at the wrong manual? Did rc.firewall change > between BSDi v3 and 4. Allowing private network machines to > access the internet via IP Aliasing and a multi-homes BSDi > box sounds simple enough. Perhaps someone out there could > point me in the right direction... > > Thanks > > Don > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message