[rescue] ipfilter

[vraptor at employees.org]

Michael--

If you do a search for FreeBSD and ipfilter, you will find
several documents which cover setup from start to finish.
Obviously, you'll want to just read the rules portion.  Some
also discuss NAT.  I can't imagine that there is that much
difference b/w the various OS flavors of ipfilter.

Also, the O'Reilly _Building Internet Firewalls_ book has a lot
of info on ipfilter if IRCC.  Searching the O'Reilly non-catalog
site will also turn up a wealth of good stuff.

=Nadine=

On Wed, 7 Aug 2002, Michael Schiller wrote:

>Hi All.
>
>I've got ipfilter 3.4 installed on my LX. It's got 2 interfaces, bf0
>which is FDDI connection to my local network (192.168.1.0) and le0 which
>is connected to a cablemodem using DHCP (and dynamically assigned IP).
>I've read thru all the example files that come with ipfilter, as well as
>a few of the ones folks have posted here, but I'm still baffled. Can
>somebody show me what the ipf.rules and/or ipnat.rules files would have
>to look like to enable NAT & minimal firewalling? Thanks.
>
>As a side note, this is currently just something I'd trying to setup for
>the heck of it. My main connection is still via a linksys cable modem on
>192.168.1.1 while the IP of the LX is (on the local net) 192.168.1.8 I
>know with Solaris you can have more than one default router in the
>/etc/defaultrouter file, but how would that work, would the machine
>always use the first one listed, unless it couldn't reach it for some
>reason, then fall back to the second router listed? Again, any info will
>be appreciated.
>
>--
>-Mike
>*------------------------------------------------------------------*
>*PGP fingerprint= D2 4F A8 B7 13 D5 73 1E  48 99 40 99 F9 BC 74 74 *
>*Email:schiller at nospam.agrijag.com \|||/    http://www.agrijag.com *
>*                                  (o o)                           *
>*-------------------------------ooO-(_)-Ooo------------------------*
>_______________________________________________
>rescue list - http://www.sunhelp.org/mailman/listinfo/rescue