Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 20 Jul 2004 10:45:53 -0500
From:      "Hauan, David" <david.hauan@fairchild.af.mil>
To:        "freebsder" <freebsder51@yahoo.com>
Cc:        freebsd-questions@freebsd.org
Subject:   RE: FreeBSD 5.1 <-> WinXP Networking Problem UPDATE #2
Message-ID:  <59FD5336D1B1FA40AF6DDD241D8DBAC681B461@amcw2ms517.amc.ds.af.mil>

next in thread | raw e-mail | index | archive | help


> -----Original Message-----
> From: freebsder [mailto:freebsder51@yahoo.com]
> Sent: Sunday, July 18, 2004 10:16 AM
> To: boxend@redtick.homeunix.com
> Cc: freebsd-questions@freebsd.org
> Subject: Re: FreeBSD 5.1 <-> WinXP Networking Problem UPDATE #2
>=20
>=20
> Hi Mark,
>=20
> I put in:=20
> natd_flags=3D"-dynamic"
> But I could not get it up and running.
>=20
> Btw, previously, what I've been doing to get the
> machine on line was typing in:
>=20
> # ipfw add 100 allow tcp from any to any via any
> 00100 allow tcp from any to any
> # ipfw add 100 allow ip from any to any via any
> 00100 allow ip from any to any
>=20
> I'm doing this because this allows me to surf the web
> and download my Email respectively.  So when I do an
> ipfw, I get:
>=20
> # ipfw -a list
> 00100 308 68064 allow tcp from any to any
> 00100  38  3187 allow ip from any to any
> 65535 337 23993 deny ip from any to any
>=20
> Now, after I made the change you suggested and
> rebooted, I got:
> # ipfw -a list
> 00050 276 17396 divert 8668 ip from any to any via
> tun0
> 00100 134 14156 allow ip from any to any via lo0
> 00200   0     0 deny ip from any to 127.0.0.0/8
> 00300   0     0 deny ip from 127.0.0.0/8 to any
> 65000   0     0 allow ip from any to any
> 65535   0     0 deny ip from any to any
>=20
> Then I tried pinging out from my Win XP box to no
> avail.=20
>=20
> I even added:
>=20
> # ipfw add 100 allow tcp from any to any via any
> 00100 allow tcp from any to any
> # ipfw add 100 allow ip from any to any via any
> 00100 allow ip from any to any
>=20
> to get:
>=20
> 00050 286 17938 divert 8668 ip from any to any via
> tun0
> 00100 134 14156 allow ip from any to any via lo0
> 00100   0     0 allow tcp from any to any
> 00100   0     0 allow ip from any to any
> 00200   0     0 deny ip from any to 127.0.0.0/8
> 00300   0     0 deny ip from 127.0.0.0/8 to any
> 65000   0     0 allow ip from any to any
> 65535   0     0 deny ip from any to any
>=20
> but still no dice!
>=20
> I'm thinking I should probably Delete the following
> two lines from above:
> 00200   0     0 deny ip from any to 127.0.0.0/8
> 00300   0     0 deny ip from 127.0.0.0/8 to any
>=20
> and see what happends.  I will try this out now, but
> if you have any other suggestions, prey tell.
>=20
> as always ... thankyou.
>=20
> Your Message::
>=20
> Jumping in late,=20
>=20
> natd_enable=3D"YES" # forward from inside
> natd_interface=3D"tun0"  # this being the connection to
> outside world=20
> natd_flags=3D"-dynamic" # because the ip addy may change
>=20
>=20
> I don't know what your trying to do here??
> >natd_flags=3D"redirect_port tcp 192.168.1.1:80 80"
> I would remove this until you get everything else
> working.
>=20
This all looks fine to me.

Is your winxp gateway set correctly?
It should be the internal IP of your=20
FreeBSd box.

dave=20



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?59FD5336D1B1FA40AF6DDD241D8DBAC681B461>