Peter wrote:

with my old linux box I forward all my LAN traffic coming from eth1 via eth0 with these simple 3 lines

$IPTABLES -t nat -A POSTROUTING -o $INET_IFACE -j MASQUERADE
$IPTABLES -A FORWARD -i $LAN_IFACE -j ACCEPT
$IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

Howevr I moved the box to FreeBSD 5.4 and also I have a new connection
PPPoE. I enabled the IPDIVERRT, FIRREWALL etc in the kernel but I am unable to make traffic coming from rl0(internal interface) be forwaded via tun0( PPPoE interface).

I have gateway_enable='yes', tried playing with ppp_nat etc...

But no luck....

Is there a simple way to do that with ipfw ? Please help - I am little bit confused...

Actually you don't need ipfw or any other packet filter to set up a simple internet access point for clients in a LAN. This configuration should be enough:

---- ppp.conf ----
myisp:
  set device PPPoE:<interface>
  set log Phase IPCP CCP Warning Error Alert
  add! default HISADDR
  set authname <username>
  set authkey <password>
----
Note: <interface> is your external network interface, i.e. neither rl0 nor tun0.

---- rc.conf ----
gateway_enable="YES"     # "sysctl net.inet.ip.forwarding=1" at startup
ppp_enable="YES"
ppp_mode="ddial"
ppp_profile="myisp"
ppp_nat="YES"            # alternatively "nat enable yes" in ppp.conf
----

I hope I didn't forget about something.

Björn
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to