Hi all,
I've been trying to set up an ISP like setup for a home lan. ie. have dial in client use cable modem to access the internet and other lan clients.
I'm using freebsd 4.8 and have just changed from ipfw/natd to ipf/ipnat.
I have the issue where clients dial in, authenticate, logon but can't access anything on the server or lan.
I've gone right back to basics and added the sample server section from the ppp.conf.sample.
server: enable chap chap80 chap81 pap passwdauth enable proxy set ifaddr 10.0.0.1 10.0.0.100-10.0.0.199 accept dns
In ipnat.rules there is a map command used to map all the packets going out on the tun0 interface, but it's use looks to be for dial out isp connection.
With packets coming in from a dial in client should i map packets back in instead, or both ways??
i have the ipnat.rules file as follows
map tl0 192.168.1.0/24 -> 0/32 map tun0 192.168.1.0/24 -> 0/32 map tun0 0/32 <- 0/32
If so, will the last command allow packets being passed from the tun0 interface coming into the server to just pass through with it's assigned ip address from ppp.conf?
I have included all the options in rc.conf from the handbook and it looks to be ok.
gateway_enable="YES" hostname="SOMECOMPUTER.SOMEWHERE.COM" ifconfig_sis0="inet 192.168.1.1 netmask 255.255.255.0" ifconfig_tl0="DHCP" ifconfig_tun0= #defaultrouter="192.168.1.1" router_enable="NO" mrouted_enable="NO" #arpproxy_all="YES" local_startup="/usr/local/etc/rc.d /etc" inetd_enable="YES" kern_securelevel_enable="NO" linux_enable="YES" lpd_enable="YES" moused_enable="YES" moused_port="/dev/psm0" moused_type="auto" nfs_reserved_port_only="YES" usbd_enable="YES" ipfilter_enable="YES" ipmon_enable="YES" ipmon_flags="-Dsvn" ipnat_enable="YES" ipfilter_rules="/etc/ipf.rules" ipnat_rules="/etc/ipnat.rules" nfs_server_enable="YES" portmap_enable="YES" nfs_client_enable="YES"
Thanks for the help.
_________________________________________________________________
Get Extra Storage in 10MB, 25MB, 50MB and 100MB options now! Go to http://join.msn.com/?pgmarket=en-au&page=hotmail/es2
_______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
