From owner-freebsd-ipfw  Sat Aug 10  6: 1:21 2002
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D041637B400
	for <freebsd-ipfw@freebsd.org>; Sat, 10 Aug 2002 06:01:18 -0700 (PDT)
Received: from attila.stevens-tech.edu (attila.stevens-tech.edu [155.246.14.11])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 81D2543E7B
	for <freebsd-ipfw@freebsd.org>; Sat, 10 Aug 2002 06:01:17 -0700 (PDT)
	(envelope-from joshl-ng@levindustries.com)
Received: from levindustries.com (jlevine-1.u05.stevens-tech.edu [155.246.211.36])
	by attila.stevens-tech.edu (SGI-8.9.3/8.9.3/7) with ESMTP id JAA76093
	for <freebsd-ipfw@freebsd.org>; Sat, 10 Aug 2002 09:01:09 -0400 (EDT)
Message-ID: <3D550E38.61503529@levindustries.com>
Date: Sat, 10 Aug 2002 08:59:36 -0400
From: Josh Levine <joshl-ng@levindustries.com>
X-Mailer: Mozilla 4.77 [en] (Windows NT 5.0; U)
X-Accept-Language: en
MIME-Version: 1.0
To: freebsd-ipfw@freebsd.org
Subject: natd/ipfw problem
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-ipfw@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-ipfw.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-ipfw>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-ipfw>
X-Loop: FreeBSD.ORG

Hi!

For the past several hours, I've been struggling to get NAT working.  I
have two NIC cards - ed0 is connected to the internet, and rl0 is
connected to my local hub.

I've followed the directions at several sites, including:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/natd.html

But no matter what I did, I couldn't get it to work...natd wasn't even
showing up when I ran ps ax.  I could ping the server's external IP
address from a computer connected to the hub - just couldn't get to the
internet.

The only error message I saw was after it listed the rules, it said:
"Firewall rules loaded, starting divert daemons: natdnatd: aliasing
address not given"

I am using the stock /etc/rc.firewall file, with firewall_type="OPEN"

Finally, from reading the man page for natd, I tried the following:

natd -interface ed0
/sbin/ipfw -f flush
/sbin/ipfw add divert natd all from any to any via ed0
/sbin/ipfw add pass all from any to any

and it worked!

Any ideas why natd isn't loading from the /etc/rc.conf file (which I
have enclosed at the end of this message)?

Thanks in advance for your help,
Josh Levine


My /etc/rc.conf:

gateway_enable="YES"
network_interfaces="ed0 rl0 lo0"
hostname="jlevine-research"
ifconfig_ed0="DHCP"
ifconfig_rl0="inet 192.168.60.1 netmask 255.255.255.0"
kern_securelevel_enable="NO"
linux_enable="YES"
nfs_reserved_port_only="YES"
saver="daemon"
sendmail_enable="NO"
sshd_enable="YES"
inetd_enable="NO"
portmap_enable="NO"
firewall_enable="YES"
firewall_type="OPEN"
natd_enable="YES"
natd_inteface="ed0"
natd_flags=""
ipmon_enable="YES"          #Firewall logging
ipmon_flags="-Dsn"

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message