FreeBSD : Bridge




Been a month .. I stuck at level 7 ...
Look at Level 7.
The paper for level 7, Anarchriz's "CRC and how to Reverse it" The paper is not long, but i still having problem with crc32 :).

I discover something new to play with ... hehe implement my freebsd gateway in datacenter with Bridge.

Previous Method IPF with IPNAT :

-- Internet  --> Gateway (FreeBSD) -- > Switch --> Internal Servers (Internal IP)

New Method :

--- Internet ---> Gateway (FreeBSD) --> Switch --> Internal Servers (External IP)

I need to recompile kernel coz i never include the Bridge option in the kernel config file.

options         BRIDGE

In /etc/sysctl.conf we need to add in

net.link.ether.bridge.enable=1
net.link.ether.bridge.config=vr0,rl0
net.link.ether.bridge.ipf=1

vr0 is to external LAN and vr1 is to internel LAN. We can also add in IP addresses for the NIC, it doesn't affect the Bridge settings.

I can't see the function of IPNAT for the moment unless we need got another set of LAN. In this case, IPF still can act as a firewall to block certain ports on certain IP addresses.