That is expected. After all that is all about proxy. When NAT is
enabled then you can ping outside world, that is fine. If you want to
provide transparent access to the clients, then you need to enable
NAT. You can control the type of access provided (browsing, IRC, IMs,
etc) by blocking(opening) the required ports from the firewall.
Alternatively, as you say...PROXY, you wont be able to ping outside
and the clients have to explicitly configure their softwares to use
the proxy running on the BSD Box.

Regards
S.


On Sun, 12 Sep 2004 00:31:41 -0700 (PDT), JP <[EMAIL PROTECTED]> wrote:
> Thank you, I am using the standard firewall and
> firewall script that came with FreeBSD.  By default,
> everything on the firewall is set to open.  I
> attempting what you suggested (disabling nat) and I
> could no longer get ou to see the net.  I could ping
> the FreeBSD box just fine, but nothing beyond that.
> 
> Suggestions?
> 
> 
> --- Shantanoo <[EMAIL PROTECTED]> wrote:
> 
> > On Sat, 11 Sep 2004 22:48:50 -0700 (PDT), JP
> > <[EMAIL PROTECTED]> wrote:
> > > Hello Gang,
> > >
> > > I am a novice at this so please bear with me.  I
> > have
> > > successfully configured Squid, Nylon and my
> > firewall,
> > > my question is how do I disable any net traffic
> > that
> > > is not going through the proxy?  It would be best
> > for
> > > all LAN traffic (telnet, ftp, chat, socks, etc) to
> > > pass through the proxy otherwise get dropped.
> > >
> > > I would imagine its a Windows configuration thing
> > but
> > > I am not for certain.
> > >
> > > Thanks,
> > > JP
> > >
> > disable NATting.
> > using firewall allow connections to ports on which
> > squid and/or nylon
> > is listening.
> >
> > BTW, which firewall are you using?
> >
> > Shantanoo
> >
> 
> _______________________________
> Do you Yahoo!?
> Express yourself with Y! Messenger! Free. Download now.
> http://messenger.yahoo.com
> 
> 
> _______________________________________________
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 



-- 
Subhro Sankha Kar
School of Information Technology
Block AQ-13/1 Sector V
ZIP 700091
India
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to