From owner-freebsd-questions@FreeBSD.ORG Tue Mar 9 08:53:47 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 76BA516A4CE for ; Tue, 9 Mar 2004 08:53:47 -0800 (PST) Received: from mail.takas.lt (mail-src.takas.lt [212.59.31.78]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2C19643D46 for ; Tue, 9 Mar 2004 08:53:42 -0800 (PST) (envelope-from prodigy@punktas.lt) Received: from prodigy ([213.190.42.48]) by mail.takas.lt with Microsoft SMTPSVC(5.0.2195.6713); Tue, 9 Mar 2004 18:53:38 +0200 Message-ID: <001801c405f7$0c9e52e0$1e00a8c0@prodigy> From: "Prodigy" To: "freebsd-questions" Date: Tue, 9 Mar 2004 18:53:22 +0200 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 X-OriginalArrivalTime: 09 Mar 2004 16:53:39.0738 (UTC) FILETIME=[126C87A0:01C405F7] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.1 Subject: ipfw + natd - not sharing internet for LAN users X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Mar 2004 16:53:47 -0000 Hi, I have problem with freebsd. I'm using ipfw + natd to share internet = connection to my network (LAN) users, but my server is not sharing = internet. My server has internet. It pings google.com, etc. Machine: FreeBSD4.9-STABLE Kernel configuration: # ... Some other stuff goes here options IPFIREWALL options IPFIREWALL_FORWARD options IPFIREWALL_VERBOSE options IPFIREWALL_VERBOSE_LIMIT=3D10 options IPFIREWALL_DEFAULT_TO_ACCEPT # Firewall is accepting all = packets by default options RANDOM_IP_ID options TCP_DROP_SYNFIN options IPSTEALTH options IPDIVERT # ... Some other stuff goes here rc.conf: defaultrouter=3D"213.190.42.1" hostname=3D"panemune.net" ifconfig_ed0=3D"inet 192.168.0.1 netmask 255.255.255.0" # Network (LAN) = interface ifconfig_ed1=3D"inet 213.190.42.48 netmask 255.255.255.0" # Internet = (outside) interface # ... here goes some other stuff, like sshd_enable=3D"YES", etc gateway_enable=3D"YES" firewall_enable=3D"YES" firewall_quiet=3D"YES" firewall_logging=3D"YES" natd_enable=3D"YES" natd_interface=3D"ed1" natd_flags=3D"-f /usr/local/etc/natd.conf" # cat /usr/local/etc/natd.conf same_ports yes use_sockets yes unregistered_only yes (also tried without these three lines) # ipfw show 65535 1546 115746 allow ip from any to any # sysctl -a | grep forward net.inet.ip.forwarding: 1 net.inet.ip.fastforwarding: 1 Lan users still don't have internet... Any help would be appreciated.