ISP FreeBSD Gateway Win2k Box
>----------rl0--------------rl1-------------------< ALL DHCP 192.168.0.1 192.168.0.2
rl0 is connected to the modem by ethernet and set for DHCP, the ISP's method of address asignment. rl1 is the second NIC in the BSD box, and is connected by crossover cable to the Win2k box. FreeBSD box and Win2k box can successfully ping each other, and both FreeBSD box and Win2k have working internet access. Everything is running A-OK.
If I wish to host WinVNC on the Win2k box, do I need to make any changes to the Gateway? Specifically, WinVNC requires the Win2k box to be listening on 5800 and 5900; I have opened these ports (and these ports only) on the Win2k box. Do I need to change rc.conf or any other files on the gateway to specify that all incoming connections on 5800 and 5900 be forwarded from rl0 to rl1? Am I gonna have to step up to IPFW (yuck!) ??
Thanks, Rishi
Mike Maltese wrote:
(1) in /etc/rc.conf, I added the following
natd_enable="YES"
natd_interface="rl0" ### public interface connected to cable modem
gateway_enable="YES"
defaultrouter="192.168.0.1" ### LAN machines use this
ifconfig_rl0="DHCP" ### Astound uses dhcp
ifconfig_rl1="inet 192.168.0.1 netmask 255.255.255.0" ### use for LAN
hostname="idfubar.dyndns.org"
As a first step, try adding these lines to rc.conf:
firewall_enable="YES" firewall_type="open"
This will enable diversion of all traffic to natd. Read the man pages for natd and ipfw and http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html for more information.
The easiest way to reinitialize the system is to type "shutdown now". This will drop you into single user mode. Press return when prompted for a shell. Hit Ctrl+D and the rc system will be run through and put you back into multi-user mode. Check for connectivity from the router and the Windows box.
As a side note, you can delete the defaultrouter entry. That's for your FreeBSD box, not LAN clients. It's getting reset by dhclient when it gets lease information from your ISP's DHCP server anyway.
_______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
