bridge ipfw also protect set

[Olivier Nicole]

Hi,

> I want to give internet connectivity to a pc behind my Freebsd, which is 
> connected to an aDSL. I know I can add another card to my set and use 
> bridge+IPFW so that the behind pc is firewalled. But will this setup
> also ensure that my Freebsd set is firewalled? Could now figure it out
> reading the book and article.

You don't want to use bridge!

1) as far as I remember, ipfw works poorly with bridge: it would
   filter only based on layer 2, not based on IP (need to confirm).

2) bridge means that packets traverse the FreeBSD machine without any
   modification (think of the bridge like a 2 ports Ethernet
   switch). Unless you use and ADSL modem (but then you can use a
   switch and connect your PC and your FreeBSD box each on one port of
   the switch) it will not work.

   If your FreeBSD machine is in charge of making the ADSL connection,
   it will not work.

3) as suggested in the prvious reply, you need some NAT and some
   routing in your FreeBSD machine. Routing is not bridge.

Best regards,

Olivier