Date: Wed, 06 Sep 2000 10:24:41 -0700 From: Kent Stewart <kstewart@urx.com> To: Ignacio <izelaya@infovia.com.ar> Cc: fbsd <questions@FreeBSD.ORG> Subject: Re: firewalls for dummies (for me) Message-ID: <39B67DD9.A65D9465@urx.com> References: <39B675B5.67924D6A@infovia.com.ar>
next in thread | previous in thread | raw e-mail | index | archive | help
Ignacio wrote: > > I'm having problems with the firewall. > > i have another machine w/ win 98. i want to enable that machine to > acces the internet when i connect this via ppp. > > i bring up the ppp conection, but the other machine cant get to the > internet. > > have i some problems with the pol of ipfw? > > The kernel is compiled with this options: > ---start (some) kernel options--- > options MROUTING ## Multicast routing > options IPFIREWALL ##firewall > options IPFIREWALL_VERBOSE ##print information > about dropped packets > options IPFIREWALL_FORWARD ##enable transparent > proxy support > options "IPFIREWALL_VERBOSE_LIMIT=50" ##limit verbosity > #options IPFIREWALL_DEFAULT_TO_ACCEPT ##allow everything by > default NO! > options IPDIVERT ##divert sockets > options IPFILTER ##kernel ipfilter > support > options IPFILTER_LOG ##ipfilter logging > options TCPDEBUG > pseudo-device ppp 1 > pseudo-device tun 1 > ---end kernel options--- > > ---start (related) dmesg echo--- > IP packet filtering initialized, divert enabled, \ > rule-based forwarding enabled, logging limited to 50 packets/entry > IP Filter: initialized. Default = pass all, Logging = enabled > ---end dmesg echo--- > > ---start (related items) rc.conf--- > ifconfig_ed0="inet 192.168.1.1 netmask 255.255.255.0" > network_interfaces="ed0 lo0 tun0" > hostname="microbio.bbs" > firewall_enable="YES" > firewall_type="OPEN" > defaultrouter="YES" Not yes but the IP address of your ISP's router. Kent > gateway_enable="YES" > natd_enable="YES" > natd_interface="tun0" > natd_flags="-f /etc/natd.conf" > ---end rc.conf--- > <snip> > -- > Ignacio Zelaya > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message -- Kent Stewart Richland, WA mailto:kbstew99@hotmail.com http://kstewart.urx.com/kstewart/index.html http://daily.daemonnews.org/ SETI (Search for Extraterrestrial Intelligence) @ Home http://setiathome.ssl.berkeley.edu/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?39B67DD9.A65D9465>