PF setting up a pf routing device

R

rootnl2k

After a few odd pumps it is a matter of getting things set up correctly.

I will be using

-----------------------------------
| eth0
| |
| eth1
| |
| eth2
| |
| eth3
| |
------------------------------------

With Eth0 being my internal interface 192.168.81.14 and eth1 being the external interface with the router on the other side having ip 192.168.81.2 .

I uses service like ftp , nntp, smtps, smtp submission, bind, pop3 , pop3s , imap, imaps , https, https, 8443, radius 1645 and 1812 , sshd , webmin, usermin, rdp , VNC
and others throught my 192.168.81.0/24 network. What need to be set up correctly so that pf is a happy worker?
 
Last edited:
tommiie said:
I was not aware of that. In that case I will read both our handbook and their user's guide and compare the differences more carefully.
Click to expand...

no problem, you are new, i guessed you did not know;)

Another thing that may be helpful, the handbook is great, paper books also may be very good, but in BSD culture the "bible" is in the man page.

If your interest in "pf" is for the long term then you could take a look at the book "The book of pf" which covers also the differences between the BSD(s) implementations.

After that, the definitive reference is always the man pages of each system.
 
The problem with the mentioned is that is assumes 2 network while I have only the one 192.168.81.0/24 . Please read above.
 
You stated you have a private network and a public network. That equals two networks. I don't understand your problem.
 
rootnl2k said:
The problem with the mentioned is that is assumes 2 network while I have only the one 192.168.81.0/24 .
Click to expand...
No, you mentioned two networks:
rootnl2k said:
With Eth0 being my internal interface 192.168.81.14 and eth1 being the external interface with the router on the other side having ip 192.168.61.2 .
Click to expand...
That's 192.168.81.0/24 and 192.168.61.0/24. If the 61 was a typo then you have a configuration problem. If there's only one network (192.168.81.0/24) then there's nothing to route at all.
 
rootnl2k said:
no! ISP setup
Click to expand...
So you are working on a setup that will allow you to accept incoming connections from customers and to give access to additional networks through yours? Along with offering additional services? Just trying to get an understanding of what your trying to accomplish.
jda
 
Go back to the diagramme at the top. Eth0 is the internal interface and eth1 is the external interface. eth0 is 192.168.81.14/24 and eth1 is communicating with 192.168.81.2/24 and is unassigned. 192.168.81.4/24 is a dialup terminal server
however many customers are coming from 192.168.81.2/24 for e-mail / web service files service et al.
 
Last edited:
You must log in or register to reply here.
Back
Top