From owner-freebsd-questions@FreeBSD.ORG Sat Feb 12 23:02:32 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D055916A4CE for ; Sat, 12 Feb 2005 23:02:32 +0000 (GMT) Received: from lakermmtai02.cox.net (lakermmtai02.cox.net [68.230.240.57]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3DC5E43D1D for ; Sat, 12 Feb 2005 23:02:32 +0000 (GMT) (envelope-from myfreebsd@cox.net) Received: from [192.168.1.101] (really [68.226.7.134]) by lakermmtao11.cox.net (InterMail vM.6.01.04.00 201-2131-117-20041022) with ESMTP id <20050212230229.CJED3313.lakermmtao11.cox.net@[192.168.1.101]>; Sat, 12 Feb 2005 18:02:29 -0500 Message-ID: <42152121.6060606@cox.net> Date: Thu, 17 Feb 2005 17:56:33 -0500 From: David Wassman User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Michael L. Squires" References: <4214184F.5060700@cox.net> <20050212170303.I20670@familysquires.net> In-Reply-To: <20050212170303.I20670@familysquires.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-questions@freebsd.org Subject: Re: Problem accessing net from a NAT Firewall X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Feb 2005 23:02:32 -0000 Micheal, The IP addresses are the same ones used in The Complete FreeBSD from Greg Lehey for the back end network. I can use 192.x.x.x or 172.x.x.x to see if they work. Will let you know. Thanks for the help. David Michael L. Squires wrote: > I don't understand this entry: > > On Wed, 16 Feb 2005, David Wassman wrote: > >> # static address for internal interface >> ifconfig_xe0="inet 223.147.37.1 netmask 255.255.255.0 broadcast >> 223.147.37.255" >> > > This is a valid IP address, not one of the three sets of IP numbers > reserved for internal networks (you use one, 172.x.x.x, in your > firewall script). Shouldn't the internal network address be one of > those three, i.e., one of 192.x.x.x, 172.x.x.x, 10.x.x.x ? > > Or I may not be understanding your setup at all. > > I have a cable model, FreeBSD 4.11 firewall/NAT, internal network > using 10.x.x.x numbers (bad choice, 10.x.x.x is used by Comcast/ATT, > etc.), 100Mbit switch, 1 Mac, 4 MS, 3 FreeBSD clients all using IP > numbers in the 10.x.x.x range. > > MLS > >