I'm stumped. This afternoon I upgraded the outward facing NIC on my gateway, with a corresponding device name change from rl0 to fxp1. I have edited rc.conf to reflect the change and made what I thought were the appropriate changes to rc.firewall. On bootup the console displays the corrected rule-set loading:
00050 divert 8668 ip from any to any via fxp0 but when I log in and type 'ipfw list' the role shows up as: 00050 divert 8668 ip from any to any via rl0 As a result, the other machines on the LAN cannot access the internet. For the life of me I cannot figure out where the old NIC is being read into the rule-set. Here are the relevant lines from rc.conf: firewall_enable="YES" firewall_type="open" # only temporary. :) firewall_script="/etc/rc.firewall" # should be default anyway gateway_enable="YES" hostname="fuzzy.home.net" ifconfig_fxp1="DHCP" ifconfig_fxp0="inet 192.168.0.1 netmask 255.255.255.0" natd_enable="YES" natd_interface="fxp1" natd_flags="-dynamic -m" David -- Sure God created the world in only six days, but He didn't have an established user-base. _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"