Stephan Weaver wrote:

Hello All,

I am trying to place my network behind a firewall [FreeBSD BASED].

What i have Done!

I have 2 Nic in the BSD PC.
vr0, vr1.
Both on the same subnet eg.
vr0 - 192.168.0.1 , vr1 - 192.168.0.2.

I Plug the Ethernet Cable From the DSL modem Into my vr0 interface.
I Plug the Ethernet Cable from the SWITCH into my vr1 interface.

I am running ipnat as follows.
ipnat.rules
----------------
map vr0 192.168.0.0/24 -> 0.0.0.0/32 proxy port ftp ftp/tcp
map vr0 192.168.0.0/24 -> 0.0.0.0/32 portmap tcp/udp 40000:60000
map vr0 192.168.0.0/24 -> 0.0.0.0/32


-----------
Here are some messages i get from my /var/log/messages.
Jun 20 22:47:36 pizzaboys kernel: arp: 192.168.0.198 is on vr0 but got reply from 00:08:74:4f:57:c5 on vr1


Thank You, Stephan Weaver
[EMAIL PROTECTED]

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

You must delete the routes for the network from both interfaces and add individual host routes to the interfaces. Suppose you have a cable modem on vr0 add a host route for that Ip and assign it to vr0 interface and add the rest of the hosts in your lan in vr1 interface. Or you can choose a different network or subnet the same ip block

Cheers,
- Sarath
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to