*BSD News Article 99035


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!uunet!in1.uu.net!144.212.100.12!news.mathworks.com!newsfeed.direct.ca!HSNX.wco.com!news.wco.com!not-for-mail
From: "Charles E. Smith II" <shadow1@tidepool.com>
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: firewall...
Date: Sat, 05 Jul 1997 03:32:31 -0700
Organization: West Coast Online's News Server - Not responsible for content
Lines: 53
Message-ID: <33BE22BF.236D@tidepool.com>
References: <33B9C45A.6CFD11D5@microa.com> <1ardp5.43a.ln@shift.utell.net>
NNTP-Posting-Host: ts25.tidepool.com
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 3.01 (Win95; I)
Xref: euryale.cc.adfa.oz.au comp.unix.bsd.freebsd.misc:43971

Brian Somers wrote:
> 
> In article <33B9C45A.6CFD11D5@microa.com>,
>         greg baxter <greg@microa.com> writes:
> > this was posted on the firewall news group.  since i'm using
> > freebsd, thought maybe this may generate some response
> > from the gurus...
> >
> > we want to firewall our local net using freebsd 2.2.
> >
> > a little confused, we put two nics in one bsd machine,
> > each with its own different network (not just diff host).
> >
> > the idea is, we need it to:
> >
> > hit our inet router, a t1 interface when called to do so
> > by any local machine. this is on net 'a'.  i suppose this
> > is the only host that will be on net 'a' other than the
> > nic in the bsd box. right?
> >
> > route ip data for us, with appropriate filtering via ipfw.
> > from net 'b' to net 'a' (net 'a' is the internet side of
> > things).
> >
> > do we need to configure this machine as a 'gateway' as
> > defined in rc.conf?  turn on 'routing' in same rc file?
> 
> You need gateway=YES and probably don't need any routing
> stuff.
> 
> Set your defaultrouter to your t1 router on the FreeBSD
> box and set the FreeBSD box as the router for all machines
> on net b.
> 
> > thanks in advance -- greg
> >
> > --
> > death, taxes and liberals will always be with us.
> > death however, does not get worse with time.
> >
> > see the micro-a web page at: www.microa.com
> 
> --
> Brian <brian@awfulhak.org> <brian@freebsd.org>
>       <http://www.awfulhak.org>
> Don't _EVER_ lose your sense of humour !
Greetings.  
  We are starting to move out of the BBS field, and into providing
internet access to our users.  We will be using FreeBsd, as the Unix
box, which user's can telnet.  We need to know what router, and terminal
servicer Freebsd is good at working with, since we have been given a few
offers from major companies already.  Thanks.
-Charles E. Smith, EuroComm