On Mon, Feb 07, 2000 at 12:38:26PM -0400, The Hermit Hacker wrote:
> 
> Is there any one of these floating around?  List search is still down,
> else would have checked there first ...
> 
> And/or, is it the same as 3.x?  We've already got one box up, but I seem
> to recall there being changes to the FIREWALL and whatnot ... but might be
> remembering the wrong thread :(

All I had to do is:

/etc/rc.conf:
firewall_enable="YES"
firewall_type="open"
natd_enable="YES"
natd_interface="ed0"
natd_flags="-log -use_sockets -same_ports -unregistered_only"

kernel config file:
options IPFIREWALL                      #firewall
options IPDIVERT                        #divert sockets

And you need an 'up to date' /etc/rc.firewall, so that this rule
will be executed automatically:

case ${natd_enable} in
[Yy][Ee][Ss])
        if [ -n "${natd_interface}" ]; then
              ${fwcmd} add divert natd all from any to any via ${natd_interface}
        fi
        ;;
esac

-- 
Andreas Klemm                                  http://www.FreeBSD.ORG/~andreas
                                     http://www.freebsd.org/~fsmp/SMP/SMP.html
                                   powered by Symmetric MultiProcessor FreeBSD
Get new songs from our band: http://www.freebsd.org/~andreas/64bits/index.html



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to