Date: Mon, 4 Dec 2000 09:37:29 +0100 From: lenz@heitec.net (Lenz Gschwendtner) To: freebsd-isp@freebsd.org Subject: Re: client firewall with 2 ethernet ports Message-ID: <20001204093729.L793@heitec.net> In-Reply-To: <XFMail.001201134446.nicole@unixgirl.com>; from nicole@unixgirl.com on Fri, Dec 01, 2000 at 13:44:46 -0700 References: <XFMail.001201134446.nicole@unixgirl.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi Nicole,
On Fri, 01 Dec 2000, Nicole wrote:
> How do I setup rules that apply to one port and not the other?
> Would I use a modified form of the simple rules?
there are several methods:
first you can simply define the traffic by direction and interface in
statements like:
$fwcmd add deny log all from ${inet} to any in recv ${oif}
$fwcmd add pass log all from ${inet} to any out xmit ${oif}
whereas you define $oif to the outside interface:
oif="de0"
or you simply define a interface without direction in a statement like
this (in a nat config file):
$fwcmd add divert natd all from any to any via ${natd_interface}
for better understanding of the firewall script it is preferrable to
include the direction in which the rule works (out xmit/in recv)
cheers
lenz
--
(__) eat penguins instead, they start to
(++)-----i\ spread around anyway!
~~| BSE | *
|_|~|_| FreeBSD Systemadministrator
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001204093729.L793>