View Single Post
Old 15th June 2008
ohauer ohauer is offline
Port Guard
Join Date: May 2008
Location: germany
Posts: 32

In the past i run OpenBSD PPPOE but i switched to modem PPPOE.
A good modem let you route all the traffic, so there is no NAT between the modem and the *BSD box.
You can the protect your BSD box easy with pf, also VPN with IPSEC works great behind a routing modem.

Two reason for me to switch from OpenBSD PPPOE to the modem PPPOE.

My provider beaks the line every 24 hours so my postfix apache and other deamons didn't work as expected.
I could bind them to a dummy or other interface and redirect with pf, but this hasn't stop the trouble.

IPSEC and ssh runs happy behind a routing modem with private IP (both directions).
Reply With Quote