Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 24 Nov 1998 09:03:44 -0800 (PST)
From:      Dan Busarow <dan@dpcsys.com>
To:        Paul Dekkers <psd@cgu.nl>
Cc:        FreeBSD Mailinglist <freebsd-questions@FreeBSD.ORG>
Subject:   Re: natd: what's wrong?
Message-ID:  <Pine.BSF.3.96.981124085032.879A-100000@java.dpcsys.com>
In-Reply-To: <Pine.BSF.3.96.981124095858.6215A-100000@chippie.cgu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 24 Nov 1998, Paul Dekkers wrote:
> | Do you have IP forwarding enabled in rc.conf?  What firewall type
> | do you have in rc.conf?
> 
> Yes, however forward_sourceroute=NO, is that wrong?

No, that's what you want.

> I have no firewall in rc.conf
> I have a default policy to enable all trafic, and in rc.local I have my
> divert rule...

My reading of the man pages suggests that running a firewall is not
optional.  You need to run ipfw.  You can set the type to open which
enforces your enable all policy.

Set firewall_enable to YES and firewall_type to OPEN in rc.conf and
move the divert rule from rc.local to rc.firewall (as the first line
of the OPEN section).

Dan
-- 
 Dan Busarow                                                  949 443 4172
 Dana Point Communications, Inc.                            dan@dpcsys.com
 Dana Point, California  83 09 EF 59 E0 11 89 B4   8D 09 DB FD E1 DD 0C 82


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.981124085032.879A-100000>