From owner-freebsd-questions Tue Sep 14 10:44:45 1999 Delivered-To: freebsd-questions@freebsd.org Received: from relay.ucb.crimea.ua (relay.ucb.crimea.ua [212.110.138.1]) by hub.freebsd.org (Postfix) with ESMTP id 774E6153F1 for ; Tue, 14 Sep 1999 10:43:41 -0700 (PDT) (envelope-from ru@ucb.crimea.ua) Received: (from ru@localhost) by relay.ucb.crimea.ua (8.9.3/8.9.3/UCB) id UAA29871; Tue, 14 Sep 1999 20:41:40 +0300 (EEST) (envelope-from ru) Date: Tue, 14 Sep 1999 20:41:40 +0300 From: Ruslan Ermilov To: elazich@AlaskaAir.com Cc: freebsd-questions@FreeBSD.ORG Subject: Re: IPFW & NATD Message-ID: <19990914204140.C19867@relay.ucb.crimea.ua> Mail-Followup-To: elazich@AlaskaAir.com, freebsd-questions@FreeBSD.ORG References: <19990913210504.D88685@relay.ucb.crimea.ua> <19990913212704.A98610@relay.ucb.crimea.ua> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.95.3i In-Reply-To: ; from elazich@AlaskaAir.com on Tue, Sep 14, 1999 at 10:22:11AM -0700 X-Operating-System: FreeBSD 3.2-STABLE i386 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, Sep 14, 1999 at 10:22:11AM -0700, elazich@AlaskaAir.com wrote: > This morning I checked my arp table and find the following just after I > have pinged (or do you say pung, proper english would seem to dictate > the latter) 10.0.0.2 on my internal subnet; > > capricorn# arp -a > ? (10.0.0.2) at (incomplete) > static-134-129.dsl.cnw.net (207.149.134.129) at 0:0:c:6a:78:c > ns1.loopback.com (207.149.134.143) at 0:80:29:68:52:c4 permanent > capricorn# > > I also noticed in te results of a "dmesg" that 10.0.0.2 had resolved to > a NIC card which I don't see on my local network, the actual message > was something to the effect that the physical address for 10.0.0.2 was > resolved by lnc1 (which is my ecternal NIC). Again, the other clients > on my internal net can ping each other fine but my firewall box cannot > ping or be pinged by the internal clients save for pinging itself. > This appears to be HW address related but I'm not sure why, can anyone > shed some light on this? My IPFW ruleset again is; > > >capricorn# ipfw sho > >00100 9001 2506073 divert 8668 ip from any to any via lnc1 > >00200 12293 2895085 allow ip from any to any > >65535 45 7436 deny ip from any to any > >capricorn# > > and my ifconfig output is; > > >capricorn# ifconfig -a > >vx0: flags=8843 mtu 1500 > > inet 10.0.0.1 netmask 0xffffff00 broadcast 10.0.0.255 > > ether 00:a0:24:bd:f8:af As I told you before, the netmask on this interface is not set up properly, it should be 0xff000000 (of course, if it's not intentional)! [...] > > Any help is greatly appreciated. > > Eli HTH, -- Ruslan Ermilov Sysadmin and DBA of the ru@ucb.crimea.ua United Commercial Bank, ru@FreeBSD.org FreeBSD committer, +380.652.247.647 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message