Date: Wed, 15 Sep 1999 10:47:06 -0700 From: elazich@AlaskaAir.com To: ru@ucb.crimea.ua Cc: freebsd-questions@FreeBSD.ORG Subject: Re: IPFW & NATD Message-ID: <msg1226967.thr-894a72.4c526e@alaskaair.com> References: <msg1219643.thr-894a72.4c526e@alaskaair.com> <19990913210504.D88685@relay.ucb.crimea.ua> <msg1220105.thr-894a72.4c526e@alaskaair.com> <19990913212704.A98610@relay.ucb.crimea.ua> <msg1220314.thr-894a72.4c526e@alaskaair.com> <msg1223309.thr-894a72.4c526e@alaskaair.com> <19990914204140.C19867@relay.ucb.crimea.ua>
next in thread | previous in thread | raw e-mail | index | archive | help
just browsing through my log files and came across this message; >Sep 13 14:53:28 capricorn /kernel: arp: 10.0.0.2 is on vx0 but got >reply from 00 >:c0:f0:16:2a:8b on lnc1 >Sep 13 14:53:29 capricorn /kernel: arp: 10.0.0.2 is on vx0 but got >reply from 00 >:c0:f0:16:2a:8b on lnc1 >Sep 13 14:59:01 capricorn /kernel: arp: 10.0.0.2 is on vx0 but got >reply from 00 >:c0:f0:16:2a:8b on lnc1 >Sep 13 14:59:06 capricorn last message repeated 3 times the hw address referenced here is not on my internal network and as indicated is being resolved by my external NIC. Why would this be? I thought private addresses were not routed and my routing table appears to be correct for my network; >capricorn# netstat -rn >Routing tables >Internet: >Destination Gateway Flags Refs Use Netif >Expire >default 207.149.134.129 UGSc 28 315 lnc1 >10/24 link#1 UC 0 0 vx0 >10.0.0.2 link#1 UHLW 0 3 vx0 >10.0.0.3 link#1 UHRLW 0 11 vx0 >127.0.0.1 127.0.0.1 UH 1 165 lo0 >207.149.134.128/27 link#2 UC 0 0 lnc1 >207.149.134.129 0:0:c:6a:78:c UHLW 29 0 lnc1 > 81 >207.149.134.143 0:80:29:68:52:c4 UHLW 1 2650 lo0 >capricorn# Eli ru@ucb.crimea.ua writes: >On Tue, Sep 14, 1999 at 10:22:11AM -0700, elazich@AlaskaAir.com wrote: >> This morning I checked my arp table and find the following just after >I >> have pinged (or do you say pung, proper english would seem to dictate >> the latter) 10.0.0.2 on my internal subnet; >> >> capricorn# arp -a >> ? (10.0.0.2) at (incomplete) >> static-134-129.dsl.cnw.net (207.149.134.129) at 0:0:c:6a:78:c >> ns1.loopback.com (207.149.134.143) at 0:80:29:68:52:c4 permanent >> capricorn# >> >> I also noticed in te results of a "dmesg" that 10.0.0.2 had resolved >to >> a NIC card which I don't see on my local network, the actual message >> was something to the effect that the physical address for 10.0.0.2 was >> resolved by lnc1 (which is my ecternal NIC). Again, the other >clients >> on my internal net can ping each other fine but my firewall box cannot >> ping or be pinged by the internal clients save for pinging itself. >> This appears to be HW address related but I'm not sure why, can anyone >> shed some light on this? My IPFW ruleset again is; >> >> >capricorn# ipfw sho >> >00100 9001 2506073 divert 8668 ip from any to any via lnc1 >> >00200 12293 2895085 allow ip from any to any >> >65535 45 7436 deny ip from any to any >> >capricorn# >> >> and my ifconfig output is; >> >> >capricorn# ifconfig -a >> >vx0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 >> > inet 10.0.0.1 netmask 0xffffff00 broadcast 10.0.0.255 >> > ether 00:a0:24:bd:f8:af >As I told you before, the netmask on this interface is not set up >properly, it should be 0xff000000 (of course, if it's not intentional)! >[...] >> >> Any help is greatly appreciated. >> >> Eli >HTH, >-- >Ruslan Ermilov Sysadmin and DBA of the >ru@ucb.crimea.ua United Commercial Bank, >ru@FreeBSD.org FreeBSD committer, >+380.652.247.647 Simferopol, Ukraine >http://www.FreeBSD.org The Power To Serve >http://www.oracle.com Enabling The Information Age >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-questions" in the body of the message >Received: from aag.alaskaair.com (aag.alaskaair.com [159.49.42.2]) by >asnasta.alaskaair.com with SMTP id MSGIYJZG; Wed, 15 Sep 1999 11:01:56 >GMT >Received: from hub.FreeBSD.org ([204.216.27.18]) by aag.alaskaair.com >via smtpd (for asnasta.alaskaair.com [159.49.42.21]) with SMTP; 15 Sep >1999 11:02:10 UT >Received: by hub.freebsd.org (Postfix, from userid 538) id D06DB15071; >Tue, 14 Sep 1999 10:44:45 -0700 (PDT) >Received: from localhost (localhost [127.0.0.1]) by hub.freebsd.org >(Postfix) with SMTP id BE2421CD587; Tue, 14 Sep 1999 10:44:45 -0700 >(PDT) (envelope-from owner-freebsd-questions) >Received: by hub.freebsd.org (bulk_mailer v1.12); Tue, 14 Sep 1999 >10:44:45 -0700 >Received: from relay.ucb.crimea.ua (relay.ucb.crimea.ua >[212.110.138.1]) by hub.freebsd.org (Postfix) with ESMTP id 774E6153F1 >for <freebsd-questions@FreeBSD.ORG>; Tue, 14 Sep 1999 10:43:41 -0700 >(PDT) (envelope-from ru@ucb.crimea.ua) >Received: (from ru@localhost) by relay.ucb.crimea.ua (8.9.3/8.9.3/UCB) >id UAA29871; Tue, 14 Sep 1999 20:41:40 +0300 (EEST) (envelope-from ru) >Message-ID: <19990914204140.C19867@relay.ucb.crimea.ua> >References: <msg1219643.thr-894a72.4c526e@alaskaair.com> ><19990913210504.D88685@relay.ucb.crimea.ua> ><msg1220105.thr-894a72.4c526e@alaskaair.com> ><19990913212704.A98610@relay.ucb.crimea.ua> ><msg1220314.thr-894a72.4c526e@alaskaair.com> ><msg1223309.thr-894a72.4c526e@alaskaair.com> To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?msg1226967.thr-894a72.4c526e>