Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 09 Dec 2004 23:28:19 -0500
From:      Tim <Niy@extacy.homeip.net>
To:        David Banning <david+dated+1103074257.8419db@skytracker.ca>
Cc:        questions@freebsd.org
Subject:   Re: gateway_enable question
Message-ID:  <41B925E3.4030206@extacy.homeip.net>
In-Reply-To: <20041210013055.GA49697@skytracker.ca>
References:  <20041210013055.GA49697@skytracker.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
David Banning wrote:

>I have a few win boxes which use my FreeBSD box as a gateway to 
>the net. I am wondering how I can keep a network connection 
>between all the computers, allowing the FreeBSD box to 
>still be connected to the net, but disallow all win boxes from 
>connecting to the net? 
>
>My thought was to disable the gateway configuration set in rc.conf.
>How do I disable the gateway option without rebooting?
>
>
>  
>

Another option: Try tweaking your firewall rule set to deny all traffic 
from the card facing the inside lan? For example, using ipfw:

#>ipfw add <open rule number> deny ip from any to any via <dev facing lan

Check out the man for your firewall for more info. Just a thought, might 
work for ya.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?41B925E3.4030206>