Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 30 Sep 2002 19:16:16 +0300 (EEST)
From:      Kim Helenius <kim.helenius@kepa.fi>
To:        freebsd-questions@freebsd.org
Subject:   Puzzling NATD problem
Message-ID:  <1033402576.3d9878d09bfa2@mail.kepa.fi>

next in thread | raw e-mail | index | archive | help
The setting:

Network topology:
Internet---Campus Network---FreeBSD NATD machine---Internal host

A custom kernel build including the following options:
options IPFIREWALL
options IPDIVERT
Used the command:
sysctl net.inet.ip.forwarding=1
And started natd with natd -interface xl0

Then did, straight from the manpage, the following firewall rules:
/sbin/ipfw -f flush
/sbin/ipfw add divert natd all from any to any via xl0
/sbin/ipfw add pass all from any to any

Now NAT works perfectly for the internal host, but (almost) all TCP connections 
cease to work to/from the NATD machine. AFAIK UDP and ICMP work perfectly. I've 
tried this on two different FreeBSD machines in the same network with identical 
results. If I remove the divert rule, everything works perfectly, except of 
course for the NAT. There have been no similar, puzzling effects on any Linux 
hosts I know of in the same network. I'm sure there's some knob I haven't 
pushed yet :)

I'm aware this doesn't make much of a firewall but I'd like to get natd working 
before I run the firewall script.

--
Kim Helenius
kim.helenius@kepa.fi

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1033402576.3d9878d09bfa2>