From owner-freebsd-questions Sat Feb 26 13:29:55 2000 Delivered-To: freebsd-questions@freebsd.org Received: from cc942873-a.ewndsr1.nj.home.com (cc942873-a.ewndsr1.nj.home.com [24.2.89.207]) by hub.freebsd.org (Postfix) with ESMTP id 3751737C011 for ; Sat, 26 Feb 2000 13:29:48 -0800 (PST) (envelope-from cjc@cc942873-a.ewndsr1.nj.home.com) Received: (from cjc@localhost) by cc942873-a.ewndsr1.nj.home.com (8.9.3/8.9.3) id QAA25225; Sat, 26 Feb 2000 16:34:34 -0500 (EST) (envelope-from cjc) Date: Sat, 26 Feb 2000 16:34:34 -0500 From: "Crist J. Clark" To: Julian Zottl Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Routing help needed... Message-ID: <20000226163434.A24331@cc942873-a.ewndsr1.nj.home.com> Reply-To: cjclark@home.com References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: ; from julianz@vsl.cua.edu on Sat, Feb 26, 2000 at 08:46:48PM -0500 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sat, Feb 26, 2000 at 08:46:48PM -0500, Julian Zottl wrote: > Hello everyone :) > Well, here is my problem. I have a FreeBSD firewall up between > two different subnets. There are two nics in the machine with IP's on > there respective subnets: > AAA.BBB.CCC.DDD mask 255.255.0.0 <-outside > AAA.BBB.EEE.FFF mask 255.255.255.0 <-inside > I have router (with -s) and gateway enabled. I can reach any address, > from the inside, on the internet except ones on the AAA.BBB.CCC.DDD range > :/ I can't even ping them! From the firewall/gateway I can ping the > AAA.BBB.CCC.DDD range and can do any network services to it, just not from > within the internal subnet. Help! TIA! > BTW, please CC me any answers! I suspect the problem might have something to do with the fact that your internal network, AAA.BBB.EEE.0/24, is a subnet of your external network, AAA.BBB.0.0/16. What exactly, I don't know; it's just a suspicion. Send your 'netstat -rn' output and possibly try some 'tcpdump's on the firewall while an internal machine pings to the outside world. See where the packets are disappearing. -- Crist J. Clark cjclark@home.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message