Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 22 Sep 2001 19:01:30 +0100
From:      Ian Morrison <ian@darq.net>
To:        Sunny Dubey <dubeys@bxscience.edu>
Cc:        questions@FreeBSD.ORG
Subject:   Re: Bridging Questions
Message-ID:  <20010922190130.A28206@phear.darq.net>
In-Reply-To: <200109221558.f8MFwas27934@voyager.bxscience.edu>; from dubeys@bxscience.edu on Sat, Sep 22, 2001 at 11:53:03AM -0400
References:  <200109221558.f8MFwas27934@voyager.bxscience.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Sep 22, 2001 at 11:53:03AM -0400, Sunny Dubey wrote:
> hey,
> 
> I need to setup a firewall using briding, and I've been reading the handbook, 
> but a few questions have poped up.

that's funny; i need a bride using firewalls...  

> First, the handbook states that not all NIC's are supported using bridging, 
> it also states to read the bridge(4) man page, however the man page doesn't 
> list which cards will or won't work under bridging.  Is there a list of cards 
> that will work under bridging??  Will two Intel ExtherExpress Pro/100 PCI 
> cards work?

As memory serves, there's a list of drivers supported somewhere...
regardless, two FXP's will do the job nicely, so then i say, yes.

> Additionally, the hand book states that there is an option to allow non-IP 
> packets (like ARP) to flow through the bridge.  Is this something I should 
> concern myself with, or just not bother at all.

It depends exactly on what you're doing.  What exactly are you doing?
You probably don't need it, would be my guess, but then you might...

> Lastly, should I use ipfw or IPFILTER (ipf).  Would either one of these be an 
> advantage for a bridge based firewall?

Both are well documented;  I prefer IPFilter personally.  There are docs
on installing it on http://www.freebsddiary.org/

> thanks for your help

you're totally welcome.

ian
--
:: darq.net /#/             :: to start press any key | where's the

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010922190130.A28206>