From owner-freebsd-questions Fri Sep 27 04:31:01 1996 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id EAA17744 for questions-outgoing; Fri, 27 Sep 1996 04:31:01 -0700 (PDT) Received: from lib.amu.edu.pl (bogusz@lib.amu.edu.pl [150.254.100.254]) by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id EAA17637 for ; Fri, 27 Sep 1996 04:30:50 -0700 (PDT) Received: (from bogusz@localhost) by lib.amu.edu.pl (8.6.12/8.6.9) id MAA10347; Fri, 27 Sep 1996 12:33:37 +0200 Date: Fri, 27 Sep 1996 12:33:36 +0200 (MET DST) From: Bogusz Jelinski To: xaa@stack.urc.tue.nl cc: freebsd-questions@FreeBSD.org Subject: Re: Q: router/forwarding configuration In-Reply-To: <199609271020.MAA05478@alterego.stack.urc.tue.nl> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-questions@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk On Fri, 27 Sep 1996, Mark Huizer wrote: > Hi! > > Somehow I cna't get it to work. > I'm trying to build a gateway/firewall on a 2.1.5-stable machine, but it > won't forward packages, even with a rule allow all from any to any > > what I have is a kernel with IPFORWARD > > and for the routing (fictitious numbers): > > ifconfig le0 inet 10.10.10.1 netmask 255.255.255.0 > ifconfig le1 inet 192.168.1.1 netmask 255.255.255.0 > > route add 10.10.10.1 127.0.0.1 > route add 192.168.1.1 127.0.0.1 > route add -net 10.10.10 10.10.10.1 > route add -net 192.168.1 192.168.1.1 > route add default 192.168.1.2 > > (with the last rule being our cisco to the outside world) > > symptoms: ping 10.10.10.255 works just once, then only finds the machine > itself, machines on the 10.* network can't get out. > > Anything obvious I missed??? put following lines into your /etc/sysconfig network_interfaces="le0 le1 lo0" ifconfig_le0="inet 10.10.10.1 netmask 255.255.255.0" ifconfig_le1="inet 192.168.1.1 netmask 255.255.255.0" ifconfig_lo0="inet localhost" defaultrouter="192.168.1.2" reboot your potential FreeBSD router. Type -c at the startup to check (and possibly correct) irq's and I/O settings. The FreeBSD installer should make "routed -q" run automaticaly after reboot. If not - do it yourself It should help Regards, bogusz