From owner-freebsd-questions  Wed Sep  6 12:43: 7 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from mail2.wmptl.com (mail2.wmptl.com [216.221.73.131])
	by hub.freebsd.org (Postfix) with ESMTP id 5C72937B422
	for <questions@freebsd.org>; Wed,  6 Sep 2000 12:43:02 -0700 (PDT)
Received: from govital.net ([10.0.0.168])
	by mail2.wmptl.com (8.9.3/8.9.3) with ESMTP id PAA66515;
	Wed, 6 Sep 2000 15:37:55 -0400 (EDT)
	(envelope-from webmaster@govital.net)
Message-ID: <39B69DE6.2D82DEE2@govital.net>
Date: Wed, 06 Sep 2000 15:41:26 -0400
From: Nathan Vidican <webmaster@govital.net>
X-Mailer: Mozilla 4.72 [en] (Win95; I)
X-Accept-Language: en
MIME-Version: 1.0
To: Ignacio <izelaya@infovia.com.ar>
Cc: questions@freebsd.org
Subject: Re: firewal & ppp
References: <39B69B0E.DF01EF6D@infovia.com.ar>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Ignacio wrote:
> 
> my home network:
> ----------------
> [Local2]  <---ether--->  [Local1]  <---PPP--->  [ISP]
> win 98                   fbsd 3.2               assigns dyn.
> 192.168.72.2             192.168.72.1           IP addr.
> 
> questions:
> ----------
> a) to give access to the internet to the win 98 machine
> i have to enable firewalls? or with gateway is sufficient?
> (now i have firewall on and working)
> 
> b) how  must i change in rc.firewall
>         /sbin/ipfw add 65534 allow all from any to any
> to only allow 192.168.72.2 to get out via 192.168.72.1 ppp link?
> (and not allow all)
> 
> c) I a later message i said that i can't get out to the internet
> from the local2 machine, under win 98. Now i can, but the
> problem is i change more than one thing at the same time :)
> and i don't now what changes were the correct.
> 
> changes made:
> ------------
>                              dot work   |   work
> 1) in rc.conf: ppp_nat=       "NO"       |  "YES"
> 2) connect via:               kppp       | ppp -auto myisp
> 
> d) I don't like the rc.conf entry:  firewall_type="OPEN"
> what i must use?
> --
> Ignacio Zelaya
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message

Add ' gateway_enable="YES" ' to your /etc/rc.conf file, and start ppp
using the ' -nat' flag, an example using automatic dialin to my ISP:

ppp -nat -auto vidican


-- 
Nathan Vidican
webmaster@wmptl.com
Windsor Match Plate & Tool Ltd.
http://www.wmptl.com/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message