Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 27 Apr 2001 00:07:47 +0200
From:      =?iso-8859-1?Q?Jes=FAs_Arn=E1iz?= <jesus@pasapues.com>
To:        <questions@freebsd.org>, <hackers@freebsd.org>
Subject:   NAT and IPFiltering
Message-ID:  <EPEJLCLAKFDENCGMPJJDAECPDFAA.jesus@pasapues.com>

next in thread | raw e-mail | index | archive | help
Hi!

I'm configuring a server able to do NAT and IP FILTERING (IPF).

What are the required options that I should set to the kernel?

I have this:

--
options IPFILTER
options IPFILTER_LOG
options IPFIREWALL
options IPDIVERT
---

but I'm not sure if IPFIREWALLING should be (I'm not going to use ipfw).

On the other hand, I put this lines in /etc/rc.conf

--
firewall_type="open"
firewall_enable="NO"
--

But everytime I boot I have to do:

# ipfw -f flush
# ipfw add pass all from any to any

if I want to see other machines of my net.

As I say, I wan to use IPFILTER but not ipfw, so what I'm supposed to do?

Thanks in advance!


--
Jesús Arnáiz
0z0ne Inc I+D/IT Manager
http://www.0z0ne.com
mailto:jesus@0z0ne.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?EPEJLCLAKFDENCGMPJJDAECPDFAA.jesus>