d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add note about security concerns w/o a firewall but other machines

Browse Source 
on your LAN to the "RUNNING NATD" introduction.

In a different way requested by:
PR:		18802
Submitted by:	Zachary K Drew <drew0054@tc.umn.edu>
This commit is contained in:
Alexander Langer 2000-06-26 14:52:39 +00:00
parent 27d19e4e41
commit 54c593c69c
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=62122
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
sbin/natd/natd.8
View File

@ -490,6 +490,14 @@ The second line depends on your interface (change ed0 as appropriate)
and assumes that you've updated
.Pa /etc/services
with the natd entry as above.
.Pp
You should be aware of the fact,
that with these firewall settings everyone on your local network
can fake his source-address using your box as gateway.
If there are other machines on your local network,
it is highly recommended to create firewall-rules that only allow traffic
from and to your own machines.
.Pp
If you specify real firewall rules,
it's best to specify line 2 at the start of the script so that
.Nm