Re: OpenBSD Router woes

2007-02-05 Thread Bill Chmura
On Mon, 5 Feb 2007 13:37:25 -0800
"BradenM - Sonoma Computer" <[EMAIL PROTECTED]> wrote:

> So, it goes like this;
> OpenBSD is installed and functional and in the process of becoming a PF/Router
> box. My problem is this, I have three ethernet cards, each assigned the names
> rl0 - rl2. rl0 is the ethernet card that is recieving an IPv4 address from my
> SBC router, rl1 will be listening to dhcp requests which I have already setup
> using dhcpd, and rl2 will be listening for dhcp requests but will not be
> connected to a computer but a wireless access point. My question, and thus my
> problem, is this: I have setup ip fowarding using sysctl and am now wondering
> how I am to distribute my internet connection from rl0 to rl1 and 2? Are PF
> rules required or do I have to write to the configuration file for the
> ethernet adapters?
> 

Unless they are all public address space, you need to perform NAT on traffic 
going from r0 -> rl1 and r0 -> rl2 - which is done through PF.  You probably 
also want some PF rules in there to mitigate traffic.

Each card will need to be configured if that is what you mean

The OpenBSD FAQ has a great writeup on PF.  



Re: OpenBSD Router woes

2007-02-05 Thread Peter Landry
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
> Of BradenM - Sonoma Computer
> Sent: Monday, February 05, 2007 4:37 PM
> To: misc@openbsd.org
> Subject: OpenBSD Router woes
>
> So, it goes like this;
> OpenBSD is installed and functional and in the process of becoming a
> PF/Router
> box. My problem is this, I have three ethernet cards, each assigned
the
> names
> rl0 - rl2. rl0 is the ethernet card that is recieving an IPv4 address
> from my
> SBC router, rl1 will be listening to dhcp requests which I have
already
> setup
> using dhcpd, and rl2 will be listening for dhcp requests but will not
> be
> connected to a computer but a wireless access point. My question, and
> thus my
> problem, is this: I have setup ip fowarding using sysctl and am now
> wondering
> how I am to distribute my internet connection from rl0 to rl1 and 2?
> Are PF
> rules required or do I have to write to the configuration file for the
> ethernet adapters?

Check the Network Address Translation section of the PF User's Guide.
That should help.



Re: OpenBSD Router woes

2007-02-05 Thread Darren Spruell

On 2/5/07, BradenM - Sonoma Computer <[EMAIL PROTECTED]> wrote:

So, it goes like this;
OpenBSD is installed and functional and in the process of becoming a PF/Router
box. My problem is this, I have three ethernet cards, each assigned the names
rl0 - rl2. rl0 is the ethernet card that is recieving an IPv4 address from my
SBC router, rl1 will be listening to dhcp requests which I have already setup
using dhcpd, and rl2 will be listening for dhcp requests but will not be
connected to a computer but a wireless access point. My question, and thus my
problem, is this: I have setup ip fowarding using sysctl and am now wondering
how I am to distribute my internet connection from rl0 to rl1 and 2? Are PF
rules required or do I have to write to the configuration file for the
ethernet adapters?


Maybe both. For certain you'll need per-interface configurations; when
the sytem bootstraps, rc(8) calls netstart(8) to initialize
interfaces, and this requires that you have configurations for the
interfaces. See also the man page for hostname.if(5).

As for PF, if you are going to enable PF (and you probably are given
the role of the system), you'll need to configure it to get it to do
what you want. Depending on your setup might end up needing to
configure NAT on the system, which is done in PF, and you will need to
configure a filter policy that suits your needs. See the OpenBSD FAQ
and pf.conf(5) for information.

DS



OpenBSD Router woes

2007-02-05 Thread BradenM - Sonoma Computer
So, it goes like this;
OpenBSD is installed and functional and in the process of becoming a PF/Router
box. My problem is this, I have three ethernet cards, each assigned the names
rl0 - rl2. rl0 is the ethernet card that is recieving an IPv4 address from my
SBC router, rl1 will be listening to dhcp requests which I have already setup
using dhcpd, and rl2 will be listening for dhcp requests but will not be
connected to a computer but a wireless access point. My question, and thus my
problem, is this: I have setup ip fowarding using sysctl and am now wondering
how I am to distribute my internet connection from rl0 to rl1 and 2? Are PF
rules required or do I have to write to the configuration file for the
ethernet adapters?