From owner-freebsd-questions  Wed Dec 25 12:10: 1 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4427137B401
	for <freebsd-questions@freebsd.org>; Wed, 25 Dec 2002 12:10:00 -0800 (PST)
Received: from web12208.mail.yahoo.com (web12208.mail.yahoo.com [216.136.173.92])
	by mx1.FreeBSD.org (Postfix) with SMTP id E659443EDC
	for <freebsd-questions@freebsd.org>; Wed, 25 Dec 2002 12:09:59 -0800 (PST)
	(envelope-from lofty_2@yahoo.com)
Message-ID: <20021225200959.55135.qmail@web12208.mail.yahoo.com>
Received: from [12.228.0.200] by web12208.mail.yahoo.com via HTTP; Wed, 25 Dec 2002 12:09:59 PST
Date: Wed, 25 Dec 2002 12:09:59 -0800 (PST)
From: Adam Lofstedt <lofty_2@yahoo.com>
Subject: Re: Can't route past gateway
To: Fernando Gleiser <fgleiser@cactus.fi.uba.ar>
Cc: freebsd-questions@freebsd.org
In-Reply-To: <20021225164651.N62363-100000@cactus.fi.uba.ar>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

> yes, your message was posted. keppt it easy, it's a
> world-wide holiday,
> so the answers can take while. :)
> 
Thanks...  Sorry about this.  I didn't mean to make it
seem hysterical or anything.

> >
> > I have a freeBSD machine with two NICS that I am
> using
> > as a NAT gateway.  No matter what I do, clients on
> my
> > LAN can't get past the gateway.  They can ping
> both
> > the interal and external interfaces of the
> gateway,
> > but can't get outside.
> 
> Either NAT is not working or the filter are blocking
> the packets. try doing an
> 'ipnat -l' and post the output. If the rules are
> loaded, drop the
> filters ('ipf -Fa') and try again from one client.
> 
#ipnat -l 
List of active MAP/redirect filters:
map x10 192.168.1.0/24 -> 0.0.0.0/32 portmap tcp/udp
40000:60000
map x10 192.168.1.0/24 -> 0.0.0.0/32

List of active sessions:

I've tried ipf -Fa, but no luck yet.

Thanks and happy holidays.

Adam Lofstedt

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message