From owner-freebsd-questions Mon Sep 13 11: 9:10 1999 Delivered-To: freebsd-questions@freebsd.org Received: from relay.ucb.crimea.ua (relay.ucb.crimea.ua [212.110.138.1]) by hub.freebsd.org (Postfix) with ESMTP id DC84815970 for ; Mon, 13 Sep 1999 11:07:32 -0700 (PDT) (envelope-from ru@ucb.crimea.ua) Received: (from ru@localhost) by relay.ucb.crimea.ua (8.9.3/8.9.3/UCB) id VAA95177; Mon, 13 Sep 1999 21:05:04 +0300 (EEST) (envelope-from ru) Date: Mon, 13 Sep 1999 21:05:04 +0300 From: Ruslan Ermilov To: elazich@AlaskaAir.com Cc: freebsd-questions@FreeBSD.ORG Subject: Re: IPFW & NATD Message-ID: <19990913210504.D88685@relay.ucb.crimea.ua> Mail-Followup-To: elazich@AlaskaAir.com, freebsd-questions@FreeBSD.ORG References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.95.3i In-Reply-To: ; from elazich@AlaskaAir.com on Mon, Sep 13, 1999 at 10:01:40AM -0700 X-Operating-System: FreeBSD 3.2-STABLE i386 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Mon, Sep 13, 1999 at 10:01:40AM -0700, elazich@AlaskaAir.com wrote: > I have a FBSD box with 2 NICs (vx0 and lnc1) which I am running ipfw > and natd on. vx0 is on my internal net using a 10 block address and > lnc1 is on my external connection. I had compiled in support for IPFW > in the kernel and run natd -interface lnc1. My IPFW rules look like > this, > > capricorn# ipfw -a l > 00100 82838 9639926 divert 8668 ip from any to any via lnc1 > 00200 84517 9917180 allow ip from any to any > 65535 16 1696 deny ip from any to any > capricorn# > > Output of ifconfig -a is; > > capricorn# ifconfig -a > vx0: flags=8843 mtu 1500 > inet 10.0.0.1 netmask 0xffffff00 broadcast 10.0.0.255 > ether 00:a0:24:bd:f8:af > netmask on this interface is set for Class C network. Is this intentional? > lnc1: flags=8843 mtu 1500 > inet 207.149.134.143 netmask 0xffffffe0 broadcast > 207.149.134.159 > ether 00:80:29:68:52:c4 > lp0: flags=8810 mtu 1500 > tun0: flags=8010 mtu 1500 > sl0: flags=c010 mtu 552 > ppp0: flags=8010 mtu 1500 > lo0: flags=8049 mtu 16384 > inet 127.0.0.1 netmask 0xff000000 > capricorn# > > I run natd -interface lnc1, this was all working fine for quite some > time but now I cannot seem to even ping anything on my loal network > from the firewall box. Any other machine on my 10 net can talk to each > other (but they cannot reach the firewall), and what's even starnger is > that when I run tcpdump on my firewall it picks up traffic on the 10 > network. Does anyone know what is going on here and how I can get > myself back to functional status? > What does `netstat -rn' produce? -- Ruslan Ermilov Sysadmin and DBA of the ru@ucb.crimea.ua United Commercial Bank, ru@FreeBSD.org FreeBSD committer, +380.652.247.647 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message