Date: Mon, 13 Sep 1999 21:27:04 +0300 From: Ruslan Ermilov <ru@ucb.crimea.ua> To: elazich@AlaskaAir.com Cc: freebsd-questions@FreeBSD.ORG Subject: Re: IPFW & NATD Message-ID: <19990913212704.A98610@relay.ucb.crimea.ua> In-Reply-To: <msg1220105.thr-894a72.4c526e@alaskaair.com>; from elazich@AlaskaAir.com on Mon, Sep 13, 1999 at 11:11:45AM -0700 References: <msg1219643.thr-894a72.4c526e@alaskaair.com> <19990913210504.D88685@relay.ucb.crimea.ua> <msg1220105.thr-894a72.4c526e@alaskaair.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Sep 13, 1999 at 11:11:45AM -0700, elazich@AlaskaAir.com wrote: > Here is a copy of netstat -rn output, thanks for your help. > > >capricorn# netstat -rn > >Routing tables > > >Internet: > >Destination Gateway Flags Refs Use Netif > >Expire > >default 207.149.134.129 UGSc 48 65116 lnc1 > >10/24 link#1 UC 0 0 vx0 > >10.0.0.1 0:a0:24:bd:f8:af UHLW 0 10 lo0 > >10.0.0.3 0:0:1b:4a:9e:35 UHLS 0 28 vx0 > >10.0.0.4 0:0:c:3e:1f:d1 UHLW 0 18 vx0 > >1106 > >127.0.0.1 127.0.0.1 UH 0 24 lo0 > >207.149.134.128/27 link#2 UC 0 0 lnc1 > >207.149.134.129 0:0:c:6a:78:c UHLW 47 0 lnc1 > > 587 > >207.149.134.143 0:80:29:68:52:c4 UHLW 1 467 lo0 > >capricorn# > > Eli > > ru@ucb.crimea.ua writes: > >On Mon, Sep 13, 1999 at 10:01:40AM -0700, elazich@AlaskaAir.com wrote: > >> I have a FBSD box with 2 NICs (vx0 and lnc1) which I am running ipfw > >> and natd on. vx0 is on my internal net using a 10 block address and > >> lnc1 is on my external connection. I had compiled in support for IPFW > >> in the kernel and run natd -interface lnc1. My IPFW rules look like > >> this, > >> > >> capricorn# ipfw -a l > >> 00100 82838 9639926 divert 8668 ip from any to any via lnc1 > >> 00200 84517 9917180 allow ip from any to any > >> 65535 16 1696 deny ip from any to any > >> capricorn# > >> > >> Output of ifconfig -a is; > >> > >> capricorn# ifconfig -a > >> vx0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 > >> inet 10.0.0.1 netmask 0xffffff00 broadcast 10.0.0.255 > >> ether 00:a0:24:bd:f8:af > >> > >netmask on this interface is set for Class C network. Is this > >intentional? > > >> lnc1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 > >> inet 207.149.134.143 netmask 0xffffffe0 broadcast > >> 207.149.134.159 > >> ether 00:80:29:68:52:c4 > >> lp0: flags=8810<POINTOPOINT,SIMPLEX,MULTICAST> mtu 1500 > >> tun0: flags=8010<POINTOPOINT,MULTICAST> mtu 1500 > >> sl0: flags=c010<POINTOPOINT,LINK2,MULTICAST> mtu 552 > >> ppp0: flags=8010<POINTOPOINT,MULTICAST> mtu 1500 > >> lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384 > >> inet 127.0.0.1 netmask 0xff000000 > >> capricorn# > >> > >> I run natd -interface lnc1, this was all working fine for quite some > >> time but now I cannot seem to even ping anything on my loal network > >> from the firewall box. Any other machine on my 10 net can talk to > >each > >> other (but they cannot reach the firewall), and what's even starnger > >is > >> that when I run tcpdump on my firewall it picks up traffic on the 10 > >> network. Does anyone know what is going on here and how I can get > >> myself back to functional status? > >> > >What does `netstat -rn' produce? > Please run the following commands simulteneously (on two different terminals) from the `firewall' host: # script tcpdump.out tcpdump -n -i vx0 host 10.0.0.3 and icmp # script ping.out ping -c 10 10.0.0.3 After ping(8) is finished, press <Control>+C on both terminals and send me tcpdump.out and ping.out files. -- Ruslan Ermilov Sysadmin and DBA of the ru@ucb.crimea.ua United Commercial Bank, ru@FreeBSD.org FreeBSD committer, +380.652.247.647 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990913212704.A98610>