(Yet Another) Home Networking Question

[Rishi Chopra]

I was able to get my network up and running with the suggestions below.  
To review, my setup is the following:

ISP         FreeBSD Gateway         Win2k Box

 >----------rl0--------------rl1-------------------<
ALL         DHCP  192.168.0.1       192.168.0.2

rl0 is connected to the modem by ethernet and set for DHCP, the ISP's 
method of address asignment. rl1 is the second NIC in the BSD box, and 
is connected by crossover cable to the Win2k box. FreeBSD box and Win2k 
box can successfully ping each other, and both FreeBSD box and Win2k 
have working internet access.  Everything is running A-OK.

If I wish to host WinVNC on the Win2k box, do I need to make any changes 
to the Gateway?  Specifically, WinVNC requires the Win2k box to be 
listening on 5800 and 5900; I have opened these ports (and these ports 
only) on the Win2k box.  Do I need to change rc.conf or any other files 
on the gateway to specify that all incoming connections on 5800 and 5900 
be forwarded from rl0 to rl1?  Am I gonna have to step up to IPFW (yuck!) ??

Thanks,
Rishi

Mike Maltese wrote:

>>(1) in /etc/rc.conf, I added the following
>>  natd_enable="YES"
>>  natd_interface="rl0" ### public interface connected to cable modem
>>  gateway_enable="YES"
>>  defaultrouter="192.168.0.1" ###  LAN machines use this
>>  ifconfig_rl0="DHCP"  ### Astound uses dhcp
>>  ifconfig_rl1="inet 192.168.0.1 netmask 255.255.255.0" ### use for LAN
>>  hostname="idfubar.dyndns.org"
>>    
>>
>
>As a first step, try adding these lines to rc.conf:
>
>firewall_enable="YES"
>firewall_type="open"
>
>This will enable diversion of all traffic to natd. Read the man pages for
>natd and ipfw and
>http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html
>for more information.
>
>The easiest way to reinitialize the system is to type "shutdown now". This
>will drop you into single user mode. Press return when prompted for a shell.
>Hit Ctrl+D and the rc system will be run through and put you back into
>multi-user mode. Check for connectivity from the router and the Windows box.
>
>As a side note, you can delete the defaultrouter entry. That's for your
>FreeBSD box, not LAN clients. It's getting reset by dhclient when it gets
>lease information from your ISP's DHCP server anyway.
>
>
>  
>