Re: OpenBSD Router woes
On Mon, 5 Feb 2007 13:37:25 -0800 "BradenM - Sonoma Computer" <[EMAIL PROTECTED]> wrote: > So, it goes like this; > OpenBSD is installed and functional and in the process of becoming a PF/Router > box. My problem is this, I have three ethernet cards, each assigned the names > rl0 - rl2. rl0 is the ethernet card that is recieving an IPv4 address from my > SBC router, rl1 will be listening to dhcp requests which I have already setup > using dhcpd, and rl2 will be listening for dhcp requests but will not be > connected to a computer but a wireless access point. My question, and thus my > problem, is this: I have setup ip fowarding using sysctl and am now wondering > how I am to distribute my internet connection from rl0 to rl1 and 2? Are PF > rules required or do I have to write to the configuration file for the > ethernet adapters? > Unless they are all public address space, you need to perform NAT on traffic going from r0 -> rl1 and r0 -> rl2 - which is done through PF. You probably also want some PF rules in there to mitigate traffic. Each card will need to be configured if that is what you mean The OpenBSD FAQ has a great writeup on PF.
Re: OpenBSD Router woes
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf > Of BradenM - Sonoma Computer > Sent: Monday, February 05, 2007 4:37 PM > To: misc@openbsd.org > Subject: OpenBSD Router woes > > So, it goes like this; > OpenBSD is installed and functional and in the process of becoming a > PF/Router > box. My problem is this, I have three ethernet cards, each assigned the > names > rl0 - rl2. rl0 is the ethernet card that is recieving an IPv4 address > from my > SBC router, rl1 will be listening to dhcp requests which I have already > setup > using dhcpd, and rl2 will be listening for dhcp requests but will not > be > connected to a computer but a wireless access point. My question, and > thus my > problem, is this: I have setup ip fowarding using sysctl and am now > wondering > how I am to distribute my internet connection from rl0 to rl1 and 2? > Are PF > rules required or do I have to write to the configuration file for the > ethernet adapters? Check the Network Address Translation section of the PF User's Guide. That should help.
Re: OpenBSD Router woes
On 2/5/07, BradenM - Sonoma Computer <[EMAIL PROTECTED]> wrote: So, it goes like this; OpenBSD is installed and functional and in the process of becoming a PF/Router box. My problem is this, I have three ethernet cards, each assigned the names rl0 - rl2. rl0 is the ethernet card that is recieving an IPv4 address from my SBC router, rl1 will be listening to dhcp requests which I have already setup using dhcpd, and rl2 will be listening for dhcp requests but will not be connected to a computer but a wireless access point. My question, and thus my problem, is this: I have setup ip fowarding using sysctl and am now wondering how I am to distribute my internet connection from rl0 to rl1 and 2? Are PF rules required or do I have to write to the configuration file for the ethernet adapters? Maybe both. For certain you'll need per-interface configurations; when the sytem bootstraps, rc(8) calls netstart(8) to initialize interfaces, and this requires that you have configurations for the interfaces. See also the man page for hostname.if(5). As for PF, if you are going to enable PF (and you probably are given the role of the system), you'll need to configure it to get it to do what you want. Depending on your setup might end up needing to configure NAT on the system, which is done in PF, and you will need to configure a filter policy that suits your needs. See the OpenBSD FAQ and pf.conf(5) for information. DS
OpenBSD Router woes
So, it goes like this; OpenBSD is installed and functional and in the process of becoming a PF/Router box. My problem is this, I have three ethernet cards, each assigned the names rl0 - rl2. rl0 is the ethernet card that is recieving an IPv4 address from my SBC router, rl1 will be listening to dhcp requests which I have already setup using dhcpd, and rl2 will be listening for dhcp requests but will not be connected to a computer but a wireless access point. My question, and thus my problem, is this: I have setup ip fowarding using sysctl and am now wondering how I am to distribute my internet connection from rl0 to rl1 and 2? Are PF rules required or do I have to write to the configuration file for the ethernet adapters?