Re: Transprent Firewall over PPP

[Philipp Buehler <OpenBSD@fips.de>]

On 01/08/2002, Dirk Rosler <dirk@unicircuits.com> wrote To misc@openbsd.org:
> >Client----Bridge----DSL-Modem----DSLAM/Internet
> >
> >Where one uses PPPoE between Client and DSL-Modem.
> >
> >pf(4) on the Bridge could peek into the PPPoE packets.
> 
> As the external interface will be a dynamically assigned address, and 
> internal addresses probably private addresses, how will that work on a 
> bridge? Can you NAT on a bridge?

No. A bridge has per-se no IP addresses. The assigned IP is at the Client,
that's the whole point.

> I am also thinking in a WLAN context here, where a wireless interface 
> operates in true access point/hostap/bridge mode and the other interface is 
> PPPoE DSL...

Bleh, you really dont understand. The bridge is doing *nothing* except filtering.

If you go into this "context", it would be a router and doing PPPoE on its own,
like it is now already capable of.

ciao
-- 
Philipp Buehler, aka fips | sysfive.com GmbH | BOfH | NUCH | <double-p> 

#1: Break the clue barrier!
#2: Already had buzzword confuseritis ?