Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 23 Feb 2002 16:33:16 -0800
From:      "Christopher Johannsen" <chris@rimrockpc.com>
To:        <questions@freebsd.org>
Subject:   IPFW and NAT Woes
Message-ID:  <200202231633.AA127860872@rimrockpc.com>

next in thread | raw e-mail | index | archive | help
I have been trying to get NAT and IPFW running on my home machine FreeBSD4.3 Release to turn it into a Broadband firewall. I have one ISA Realtek 10MB card and 1 Realtek 10/100 PCI NIC and a 3com Cable modem. I have compiled the IPFIREWALL_VERBOSE and IPDIVERT options into the kernel and added: 

gateway_enable="YES"
firewall_enable="YES"
firewall_type="OPEN"
natd_enable="YES"
natd_interface="ed1" 

to my rc.conf.  My internal net is using the 192.168.1 network address. My exterenal nic is using DHCP.  Internal IP is 192.168.1.5.  Here's the problem. Once the machine is up I can ping names and numbers from the Gateway machine to the outside world and I can ping to the inside network from the gateway. I can ping both interfaces from my machine on the network but I cannot ping internet addresses from inside the network. It seems like the NAT is not working properly. I am able to access my gateway machine from the outside world through SSH.  Below is a copy of my rc.conf:

gateway_enable="YES"
hostname="hornet"
network_interfaces="rl0 ed1"
ifconfig_rl0="inet 192.168.1.5  netmask 255.255.255.0"
ifconfig_ed1="DHCP"
inetd_enable="YES"
linux_enable="YES"
sendmail_enable="NO"
sshd_enable="YES"
log_in_vain="YES"
ipfilter_enable="YES"
ipfilter_flags=""
ipmon_enable="YES"
ipmon_flags="-Dsvn"
ntpdate_enable="YES"
ntpdate_flags="ogden.bendnet.com"
firewall_enable="YES"
firewall_type="OPEN" 
natd_enable="YES"
natd_interface="ed1"
natd_flags="-redirect_port tcp 192.168.1.5:22 22"

Any ideas or suggestion are appreciated. Thanks in advance!

--
Christopher Johannsen
Rimrock PC Consulting
541-350-2851
chris@rimrockpc.com
--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200202231633.AA127860872>