Hello,
I have a t1 with 16 ip's, which I need to share
around this office. Some of those real/routable IP's
I want to assign internally in the office, while at
the same time them to be behind my FreeBSD
firewall/dummynet pc.
t1Router
209.150.x.145
|
|
209.150.x.146 255.255.255.240
FreeBSD bridge/ipfw/dummynet/natd [two nics]
192.168.0.1 255.255.255.0
|
|
Server-209.150.214.147, Server 209.150.x.148
Workstation 192.168.0.x WorkStation 192.168.0.x
So far my bridge and natd work fine, except those
internal machines with 209.150 adress space can't see
each other [they won't ping any other 209.150.x.x],
but I can ping them from the outside and the can ping
outside. The t1 router is directly connected into the
FreeBSD machine. The handbook says I need to have
DEFAULT_TO_ACCEPT in my kernel for ipfw, right now I
just have firewall_type="open", and
net.link.ether.bridge_ipfw: 0, that works but when I
set that thing to 1 traffic dies randomly....so is
that kernel option necessary?
I think this setup is whacked and I'm just getting
lucky that someone can actually see those machines
from the outside, I just need advice on how this
should be done / Is this a good way to do it? or is it
possible to do it this way?
Basically I want to have some machines with public IP
inside my network behind a firewall/dummynet
[subnetting too much headache for a network of 16
ip's], and other machines with private address space
inside behind my firewall/dummynet thru natd.
Peter
__________________________________________________
Do you Yahoo!?
Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop!
http://platinum.yahoo.com
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
