Simple ipfw problem :(

[Dmitry Mityugov]

On 6/23/05, Björn König <bkoenig at cs.tu-berlin.de> wrote:
...
> Actually you don't need ipfw or any other packet filter to set up a
> simple internet access point for clients in a LAN. This configuration
> should be enough:
> 
> ---- ppp.conf ----
> myisp:
>    set device PPPoE:<interface>
>    set log Phase IPCP CCP Warning Error Alert
>    add! default HISADDR
>    set authname <username>
>    set authkey <password>
> ----
> Note: <interface> is your external network interface, i.e. neither rl0
> nor tun0.
> 
> ---- rc.conf ----
> gateway_enable="YES"     # "sysctl net.inet.ip.forwarding=1" at startup
> ppp_enable="YES"
> ppp_mode="ddial"
> ppp_profile="myisp"
> ppp_nat="YES"            # alternatively "nat enable yes" in ppp.conf
> ----
> 
> I hope I didn't forget about something.

nat deny_incoming yes might be a good addition to this list.

-- 
Dmitry

"We live less by imagination than despite it" - Rockwell Kent, "N by E"