From owner-freebsd-questions Tue Sep 14 11:30:47 1999 Delivered-To: freebsd-questions@freebsd.org Received: from aag.alaskaair.com (outbound.alaskaair.com [159.49.42.191]) by hub.freebsd.org (Postfix) with SMTP id 5B68C15596 for ; Tue, 14 Sep 1999 11:29:27 -0700 (PDT) (envelope-from elazich@AlaskaAir.com) Received: from OUTBOUND.alaskaair.com by aag.alaskaair.com via smtpd (for hub.FreeBSD.org [204.216.27.18]) with SMTP; 14 Sep 1999 18:32:35 UT Received: from asnasta (asnasta.alaskaair.com [159.49.42.21]) by outbound.alaskaair.com (8.9.3/8.9.3) with SMTP id LAA23055; Tue, 14 Sep 1999 11:28:11 -0700 From: elazich@AlaskaAir.com To: ru@ucb.crimea.ua Cc: freebsd-questions@FreeBSD.ORG Date: Tue, 14 Sep 1999 11:26:29 -0700 Subject: Re: IPFW & NATD Message-ID: References: <19990913210504.D88685@relay.ucb.crimea.ua> <19990913212704.A98610@relay.ucb.crimea.ua> <19990914204140.C19867@relay.ucb.crimea.ua> Organization: Alaska Airlines MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit Content-ID: X-Gateway: NASTA Gate 2.0 for FirstClass(R) Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I did intend to set the netmask up as it appears, and it was working for me earlier as I said. Besdies, my internal clients are functioning just fine with the same netmask so unless there is some requirement I don't know about, I don't see why the netmask is an issue. I am hoping that the info I got recently can help shed some light on matters. Thanks again for your help. Eli ru@ucb.crimea.ua writes: >On Tue, Sep 14, 1999 at 10:22:11AM -0700, elazich@AlaskaAir.com wrote: >> This morning I checked my arp table and find the following just after >I >> have pinged (or do you say pung, proper english would seem to dictate >> the latter) 10.0.0.2 on my internal subnet; >> >> capricorn# arp -a >> ? (10.0.0.2) at (incomplete) >> static-134-129.dsl.cnw.net (207.149.134.129) at 0:0:c:6a:78:c >> ns1.loopback.com (207.149.134.143) at 0:80:29:68:52:c4 permanent >> capricorn# >> >> I also noticed in te results of a "dmesg" that 10.0.0.2 had resolved >to >> a NIC card which I don't see on my local network, the actual message >> was something to the effect that the physical address for 10.0.0.2 was >> resolved by lnc1 (which is my ecternal NIC). Again, the other >clients >> on my internal net can ping each other fine but my firewall box cannot >> ping or be pinged by the internal clients save for pinging itself. >> This appears to be HW address related but I'm not sure why, can anyone >> shed some light on this? My IPFW ruleset again is; >> >> >capricorn# ipfw sho >> >00100 9001 2506073 divert 8668 ip from any to any via lnc1 >> >00200 12293 2895085 allow ip from any to any >> >65535 45 7436 deny ip from any to any >> >capricorn# >> >> and my ifconfig output is; >> >> >capricorn# ifconfig -a >> >vx0: flags=8843 mtu 1500 >> > inet 10.0.0.1 netmask 0xffffff00 broadcast 10.0.0.255 >> > ether 00:a0:24:bd:f8:af >As I told you before, the netmask on this interface is not set up >properly, it should be 0xff000000 (of course, if it's not intentional)! >[...] >> >> Any help is greatly appreciated. >> >> Eli >HTH, >-- >Ruslan Ermilov Sysadmin and DBA of the >ru@ucb.crimea.ua United Commercial Bank, >ru@FreeBSD.org FreeBSD committer, >+380.652.247.647 Simferopol, Ukraine >http://www.FreeBSD.org The Power To Serve >http://www.oracle.com Enabling The Information Age >Received: from aag.alaskaair.com (aag.alaskaair.com [159.49.42.2]) by >asnasta.alaskaair.com with SMTP id MSGIYJZG; Tue, 14 Sep 1999 17:46:13 >GMT >Received: from relay.ucb.crimea.UA ([212.110.138.1]) by >aag.alaskaair.com via smtpd (for asnasta.alaskaair.com [159.49.42.21]) >with SMTP; 14 Sep 1999 17:45:23 UT >Received: (from ru@localhost) by relay.ucb.crimea.ua (8.9.3/8.9.3/UCB) >id UAA29871; Tue, 14 Sep 1999 20:41:40 +0300 (EEST) (envelope-from ru) >Message-ID: <19990914204140.C19867@relay.ucb.crimea.ua> >References: ><19990913210504.D88685@relay.ucb.crimea.ua> > ><19990913212704.A98610@relay.ucb.crimea.ua> > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message