Proper auditing is even more important on the gateway than it is on the client machines. The gateway is the contact point with the outside world, and it will receive nonstop abuse from all over the Internet. Because of this, it’s vital to keep a good eye on the logs of this machine.

The services arpwatch, syslog, and swatch should all be installed and configured in the same fashion as described for the FreeBSD client machines in Chapter 4.

Don’t forget to periodically log in to the gateway and check the logs and root user mail for evidence of a security breach. Or even better, forward this information to an email account you check often.

At this point, everything should be all set on the gateway. It’s a good idea to reboot and make sure all the services start up without any errors. Fire up a wireless client, and check to make sure it gets an IP address and can access the Internet.