From owner-freebsd-questions  Tue Feb 12  7:38:49 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from web11201.mail.yahoo.com (web11201.mail.yahoo.com [216.136.131.171])
	by hub.freebsd.org (Postfix) with SMTP id 95F7837B425
	for <freebsd-questions@freebsd.org>; Tue, 12 Feb 2002 07:38:45 -0800 (PST)
Message-ID: <20020212152950.62367.qmail@web11201.mail.yahoo.com>
Received: from [152.78.128.54] by web11201.mail.yahoo.com via HTTP; Tue, 12 Feb 2002 07:29:50 PST
Date: Tue, 12 Feb 2002 07:29:50 -0800 (PST)
From: Gary Pentland <gp397@yahoo.com>
Subject: IPX bridge and IP nat...
To: freebsd-questions@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Hi guys

I am rebuilding my firewall / nat router to share my
internet connection accross my LAN.

I have 3 network cards, one (nl0) connects to the
internet and is secured and nated.  the other two (de0
and de1) I run bridged so I can simplify the process
of playing some games without the need to educate my
housemates about routers etc. and broadcasting will
work effectivly. (we play some old games :-)

I have this working but for some reason IPX packets
don't get bridged. I need to use IPX to support some
really old games.  Has anyone tried this sort of
setup, I presume the IPFIREWALL code is dropping the
IPX packets as they don't match any rules...  If I set
the firewall to default allow (something I don't
really want to do) then set something like,

deny ip from all to all

will this then make the machine secure enough (it is
on a DSL connection) but allow IPX through the bridge?

Also does anyone have experience running a default
allow firewall and have any suggestions how to secure
it?

Many thanks,

Gary

__________________________________________________
Do You Yahoo!?
Send FREE Valentine eCards with Yahoo! Greetings!
http://greetings.yahoo.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message