From owner-freebsd-questions@FreeBSD.ORG  Thu Jun  5 05:47:25 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2AA6A37B401
	for <freebsd-questions@freebsd.org>;
	Thu,  5 Jun 2003 05:47:10 -0700 (PDT)
Received: from argus.wifi.volker.de (p508927FC.dip.t-dialin.net
	[80.137.39.252])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9774143FAF
	for <freebsd-questions@freebsd.org>;
	Thu,  5 Jun 2003 05:47:06 -0700 (PDT)
	(envelope-from freebsd@secspace.de)
Received: from argus.wifi.volker.de (localhost [127.0.0.1])
	by argus.wifi.volker.de (8.12.9/8.12.9) with SMTP id h55CkrTo066964;
	Thu, 5 Jun 2003 14:46:55 +0200 (CEST)
	(envelope-from freebsd@secspace.de)
Date: Thu, 5 Jun 2003 14:46:53 +0200
From: Volker Kindermann <freebsd@secspace.de>
To: freebsd-questions@freebsd.org
Message-Id: <20030605144653.6f796d75.freebsd@secspace.de>
In-Reply-To: <KOEILOHHAMNABNLJONMMIEGOCAAA.mthomas@breakawayltd.com>
References: <KOEILOHHAMNABNLJONMMIEGOCAAA.mthomas@breakawayltd.com>
X-Mailer: Sylpheed version 0.8.10claws (GTK+ 1.2.10; i386-portbld-freebsd4.7)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
cc: mthomas@breakawayltd.com
Subject: Re: Firewall/DMZ routing
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Jun 2003 12:47:25 -0000

Hi Mark,


> I'm setting up a multihomed firewall box. I have all interfaces up and
> running but have something going wrong with routing.

do you have forwarding enabled on the firewall?

Check if:

sysctl net.inet.ip.forwarding

shows:

net.inet.ip.forwarding: 1

 -volker