Re: gateway_enable question

2004-12-11 Thread Loren M. Lang
On Fri, Dec 10, 2004 at 03:20:14PM -0500, David Banning wrote: > > >My thought was to disable the gateway configuration set in rc.conf. > > >How do I disable the gateway option without rebooting? > > > > I have gateway enabled, but natd disabled, which blocks the > > traffic from inside to outside

Re: gateway_enable question

2004-12-11 Thread Kevin D. Kinsey, DaleCo, S.P.
David Banning wrote: On the firewall it is difficult to block the win boxes because I -want- each machine to be able to contact each other, but I don't want the windows boxes to have internet connection. Now, that seems a little weird. Do you not have a hub or switch other than the BSD bo

Re: gateway_enable question

2004-12-11 Thread Giorgos Keramidas
On 2004-12-11 00:46, David Banning <[EMAIL PROTECTED]> wrote: > > Lots of guys have suggested the firewall. On ipfw, that'd be > > something like (put your rule number for N and sub your network > > in for 192.168.0): > > > > add <> deny ip from any 192.168.0/24 to any out via tun0 > > > > (I'm as

Re: gateway_enable question

2004-12-10 Thread David Banning
> Lots of guys have suggested the firewall. On ipfw, that'd be > something like (put your rule number for N and sub your network > in for 192.168.0): > > add <> deny ip from any 192.168.0/24 to any out via tun0 > > (I'm assuming your PPP uses the first tunnel device?) Not sure what the -first-

Re: gateway_enable question

2004-12-10 Thread Kevin D. Kinsey, DaleCo, S.P.
David Banning wrote: My thought was to disable the gateway configuration set in rc.conf. How do I disable the gateway option without rebooting? I have gateway enabled, but natd disabled, which blocks the traffic from inside to outside, I believe. I have my nat running in ppp, and when I

Re: gateway_enable question

2004-12-10 Thread David Banning
> >My thought was to disable the gateway configuration set in rc.conf. > >How do I disable the gateway option without rebooting? > > I have gateway enabled, but natd disabled, which blocks the > traffic from inside to outside, I believe. I have my nat running in ppp, and when I disable it, all th

Re: gateway_enable question

2004-12-10 Thread David Banning
> #>ipfw add deny ip from any to any via http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: gateway_enable question

2004-12-10 Thread David Banning
> If you use nat, killing natd might be an option. You could also put up > a firewall that blocks those computers ip addresses. Maybe have 2 > firewall configs. You could simply run a flush and then load the new > ones on the command line. (ipfw) Thanks Lucas. I have tried killing the ppp n

Re: gateway_enable question

2004-12-10 Thread Loren M. Lang
On Fri, Dec 10, 2004 at 01:56:44PM +0900, Rob wrote: > David Banning wrote: > >I have a few win boxes which use my FreeBSD box as a gateway to > >the net. I am wondering how I can keep a network connection > >between all the computers, allowing the FreeBSD box to > >still be connected to the net

Re: gateway_enable question

2004-12-09 Thread Rob
David Banning wrote: I have a few win boxes which use my FreeBSD box as a gateway to the net. I am wondering how I can keep a network connection between all the computers, allowing the FreeBSD box to still be connected to the net, but disallow all win boxes from connecting to the net? My thou

Re: gateway_enable question

2004-12-09 Thread Tim
David Banning wrote: I have a few win boxes which use my FreeBSD box as a gateway to the net. I am wondering how I can keep a network connection between all the computers, allowing the FreeBSD box to still be connected to the net, but disallow all win boxes from connecting to the net? My thou