From owner-freebsd-questions  Fri Mar 15 13:57:49 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from pt-quorum.com (pt-quorum.com [209.10.167.210])
	by hub.freebsd.org (Postfix) with ESMTP id 27B6637B416
	for <freebsd-questions@freebsd.org>; Fri, 15 Mar 2002 13:57:42 -0800 (PST)
Received: from gw.tex.bogus (unknown [213.30.47.69])
	by pt-quorum.com (Postfix) with ESMTP
	id 9A29CED0A; Fri, 15 Mar 2002 21:52:02 +0000 (WET)
Received: by gw.tex.bogus (Postfix, from userid 1001)
	id 2B8586B9; Fri, 15 Mar 2002 21:56:13 +0000 (WET)
Date: Fri, 15 Mar 2002 21:56:13 +0000
From: Nuno Teixeira <nunotex@pt-quorum.com>
To: freebsd-questions@freebsd.org
Cc: KHaeberlein@gmx.net
Subject: Re: firewall, ppp and tun0
Message-ID: <20020315215612.GE33280@gw.tex.bogus>
References: <3C90B7E0.2030906@gmx.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <3C90B7E0.2030906@gmx.net>
User-Agent: Mutt/1.3.28i
X-Operating-System: FreeBSD 4.5-STABLE
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Thu, Mar 14, 2002 at 03:46:56PM +0100, KHaeberlein@gmx.net wrote:
> I want to setup a FreeBSD machine to the Internet via PPPoE and DSL.
> This is no problem with the basic installation. But if I want to run it 
> with natd and a firewall it does not work. To connect to the ISP is no 
> problem, but I can not send and do not receive any data.
> 
> My /etc/rc.conf has following entries:
> 
>        ifconfig ed0 up            # start PPPoE-interface
>        gateway_enable="YES"
>        firewall_enable="YES"
>        firewall_script="name of  firewall script"
>        ppp_nat="NO"
>        natd_enable="YES"
>       natd_interface="tun0"
>       natd_flags="-dynamic"
> 
> As proposed in manpage natd(8) I have following firewall script:
> 
>        /sbin/ipfw    -f    flush
>        /sbin/ipfw    add 50 divert natd all from any to any via tun0
>       /sbin/ipfw     add pass all from any to any    
> 
> At boot time I get these messages:
> 
>        ipfw :  warning:    interface  " tun0 "   does not exist    (at 
> proceeding the firewall script)
>        Firewall rules loaded, starting divert daemons:   natdnatd  :   
> Unknown interface name tun0
> 
> 
> Can anybody tell what's wrong here?
> 
> Thanks
> 
> 
> Klaus
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message

    
    Hi,
    
    I use a similar config but with a "normal" ppp conection ant it works 
    OK:
    
    /etc/rc.conf:
    
    # FIREWALL and NAT
    firewall_enable="YES"
    firewall_type="open"
    ppp_nat="NO"
    natd_enable="YES"
    natd_interface="tun0"
    natd_flags="-dynamic"
    # END FIREWALL and NAT
    
    The error "tun0 does not exist" is normal because the connection isn't 
    up yet, but there is no problem at all.
    
    Also, make sure that you have a kernel compiled with (at least):
    
    options	IPFIREWALL	# firewall
    options	IPDIVERT	# divert sockets
    
    so that natd works.
    
    hope that helps.
    
    Bye,
        
    
-- 
Nuno Teixeira
pt-quorum.com

/* 
PGP Public Key:
http://www.pt-quorum.com/pgp/nunoteixeira.asc
Fingerprint:
AF91 4AC0 85CB 272A 5441  E02F 5D84 ED9D 34D5 9145
*/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message