Then you must tell the firewall what the topology looks
like. I did this by putting the following into /etc/rc.firewall in the
simple section. Please note that these numbers are imaginary and will not work for
you. Please change 1.2.3.444 to your own IP as assigned by your ISP and change
192.168.0.444 to the IP address you have assigned to your gateway machine.
# set these to your outside interface network and netmask and ip
oif="ed0"
onet="1.2.3.444/24"
omask="255.255.255.0"
oip="1.2.3.444"
# set these to your inside interface network and netmask and ip
iif="ed1"
inet="192.168.0.444/24"
imask="255.255.255.0"
iip="192.168.0.444"
I also found that I had to disable some of the default rules. But I'll details
those rules at a later date.
If you're using natd, you might want to add the following to the end of /etc/rc.firewall.
But please note that with 2.2.8, these statements were included with rc.firewall
and will not be necessary.
$fwcmd add divert natd all from any to any via ${oif}
$fwcmd add pass all from any to any
After getting the above going, I found that FTP did not work. Strange.
There's nothing in the rules that prevent FTP. I gave up and used the open firewall
instead. From time to time, I played with the rules, trying to figure out why it
wasn't working. |
