PtokaX forum

Stuff => Offtopic => Topic started by: bastya_elvtars on 02 February, 2005, 23:56:05

Title: FreeBSD question
Post by: bastya_elvtars on 02 February, 2005, 23:56:05
In order to use a machine as a NAT-enabled gateway. In order to enable this, i have to enable ipfw, but i want to use ipfilter as firewall. Is ipfw playing a dummy role in this or the only dummy is me? :)
Title:
Post by: bastya_elvtars on 03 February, 2005, 01:41:28
Quote# How do I use the FreeBSD traffic shaper dummynet(4) with IPF?

    Dummynet is closely tied to ipfw(8) and is not supported by IPF. Darren suggests the use of the ALTQ traffic shaper instead. It is possible to use IPFW and IPF together, e.g. using IPFW for dummynet and IPF for filterning and NAT, see below.


so i replied myself. lol
Title:
Post by: plop on 03 February, 2005, 18:14:16
QuoteOriginally posted by bastya_elvtars
In order to use a machine as a NAT-enabled gateway. In order to enable this, i have to enable ipfw, but i want to use ipfilter as firewall. Is ipfw playing a dummy role in this or the only dummy is me? :)
you can do it 2 way's.
use the standard kernel and load the kernel module for iether ipfw or ipfilter.
or compile a new kernel with the firewall you want.

plop
Title:
Post by: bastya_elvtars on 03 February, 2005, 18:23:37
Thx, plop. <--- there should be stats about how many times this sentence was written. :D

Should i use Dummynet or Altq? I just ask because this will be a 2Gbit gateway...
Title:
Post by: plop on 03 February, 2005, 21:19:51
QuoteOriginally posted by bastya_elvtars
Thx, plop. <--- there should be stats about how many times this sentence was written. :D

Should i use Dummynet or Altq? I just ask because this will be a 2Gbit gateway...
dummynet is a addon for ipfw which gives enchanched extra features mainly for pipelining.
for example you can make a bandwidth limiter.
better stick 2 a standard fw without any of these features.
also check out the special router soft for the kind of gateway your about 2 setup.
it's a dual way realtime NAT router, the portforwarding works automaticly for these.

plop
Title:
Post by: bastya_elvtars on 05 February, 2005, 16:20:29
should i use zebra or some other routing daemon and completely get rid of routed/ipfw and fire ipf?

(and pleaaaaaaaase log on to msn ;)

***edit***

and we do not need NAT as we have 64 IPs to conect, just have 2 find out how to make a 160.114.118.64-160.114.118.128 range (255.255.255.192)