From owner-freebsd-questions Wed Dec 1 17:24: 5 1999 Delivered-To: freebsd-questions@freebsd.org Received: from nister.prisa.com (gatekeeper.prisa.com [204.94.67.66]) by hub.freebsd.org (Postfix) with ESMTP id 5886014DE6 for ; Wed, 1 Dec 1999 17:23:42 -0800 (PST) (envelope-from nschein@prisa.com) Received: from schein (schein.prisa.com [172.16.129.114]) by nister.prisa.com (8.9.3/8.9.3) with SMTP id RAA18031; Wed, 1 Dec 1999 17:21:09 -0800 (PST) (envelope-from nschein@prisa.com) From: "Nathaniel Schein" To: "nat" , Subject: RE: natd not working properly. firewall problem? Date: Wed, 1 Dec 1999 17:21:08 -0800 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) In-Reply-To: <002b01bf3c61$4d7a05c0$2d96183f@vedika> X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Importance: Normal Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Did you compile the kernel with: options IPFIREWALL #firewall options IPDIVERT #divert sockets pseudo-device bpfilter 4 #Berkeley packet filter Also make sure you have proper connectivity with both networks and add firewall_type="OPEN" to the /etc/rc.conf -----Original Message----- From: owner-freebsd-questions@FreeBSD.ORG [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of nat Sent: Wednesday, December 01, 1999 5:05 PM To: Nathaniel Schein; freebsd-questions@FreeBSD.ORG Subject: Re: natd not working properly. firewall problem? i did that and it is still not working. please help I have a dead line to set up this network. Your natd interface should be "de1". -----Original Message----- From: owner-freebsd-questions@FreeBSD.ORG [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of nat Sent: Wednesday, December 01, 1999 4:31 PM To: freebsd-questions@FreeBSD.ORG Subject: natd not working properly. firewall problem? I have set up natd by the manual. I have a cable modem and two nics. what i am trying to do is share the internet with other users on my LAN. The cable modem is currently setup on device de1 properly and works for the "local" user. Now, throgh the clients I can only contact the network card (de1) that the cable modem is connected to. I cannot contact the outside network. The de0 interface is the one on the internal network and is set to 192.168.0.1. All of the clients have this as the default router. these are my firewall settings (please tell me which ones are wrong): #Flush out the list before we begin. $fwcmd -f flush # divert $fwcmd add 1 divert natd from any to any via de0 # allow by default $fwcmd add 65000 allow all from any to any # 50-99: trusted hosts $fwcmd add 50 allow ip from any to 207.171.202.198:255.255.255.224 $fwcmd add 51 allow ip from 207.171.202.198:255.255.255.224 to any $fwcmd add 52 allow ip from 24.1.183.147 to any $fwcmd add 53 allow ip from any to 24.1.183.147 # 1000-1999: DoS/hack prevention $fwcmd add 1000 deny tcp from any to any 1080 $fwcmd add 1001 deny tcp from any to any 12345 $fwcmd add 1002 deny tcp from any to any 31337 $fwcmd add 1003 deny tcp from any to any 111 $fwcmd add 1004 deny tcp from any to any 87 $fwcmd add 1005 deny tcp from any to any 2049 $fwcmd add 1006 deny tcp from any to any 512 $fwcmd add 1007 deny tcp from any to any 513 $fwcmd add 1008 deny tcp from any to any 514 $fwcmd add 1009 deny tcp from any to any 515 $fwcmd add 1010 deny tcp from any to any 540 *this is in the /etc/rc.firewall file. This is what i have set up for rc.conf: firewall_enable="YES" natd_enable="YES" natd_interface="de0" named_enable="YES" gateway_enable="YES" this is the output of the ifconfig -a command: de0: flags=8843 mtu 1500 inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255 ether 00:40:05:a2:c9:4b media: autoselect (10baseT/UTP) status: active supported media: autoselect 100baseTX 100baseTX 10baseT/UTP 10baseT/UTP de1: flags=8843 mtu 1500 inet 24.1.177.140 netmask 0xffffff00 broadcast 24.1.177.255 ether 00:40:05:a2:c9:49 media: autoselect (10baseT/UTP) status: active supported media: autoselect 100baseTX 100baseTX 10baseT/UTP 10baseT/UTP lp0: flags=8810 mtu 1500 tun0: flags=8010 mtu 1500 sl0: flags=c010 mtu 552 ppp0: flags=8010 mtu 1500 lo0: flags=8049 mtu 16384 inet 127.0.0.1 netmask 0xff000000 This is the output of the netstat -rn command: Internet: Destination Gateway Flags Refs Use Netif Expire default 24.1.177.1 UGSc 14 55 de0 24.1.177/24 link#1 UC 0 0 de0 24.1.177.1 link#1 UHLW 14 0 de0 127.0.0.1 127.0.0.1 UH 1 4 lo0 192.168 link#2 UC 0 0 de1 192.168.0.3 0:40:5:a3:38:a4 UHLW 2 76 de1 1183 I think that is how you set it up. There is also one last strange thing that I think might be the problem. Right before it prints out gateway=yes it says tcpextensions=no. Im not sure what that means either. I am using the Cox@home network so please help me if you can. Thank you, nat To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message