From owner-freebsd-questions@FreeBSD.ORG Wed Mar 9 15:45:58 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 21E0416A4CE for ; Wed, 9 Mar 2005 15:45:58 +0000 (GMT) Received: from rproxy.gmail.com (rproxy.gmail.com [64.233.170.194]) by mx1.FreeBSD.org (Postfix) with ESMTP id BD72743D46 for ; Wed, 9 Mar 2005 15:45:57 +0000 (GMT) (envelope-from jeff.wirth@gmail.com) Received: by rproxy.gmail.com with SMTP id c51so189624rne for ; Wed, 09 Mar 2005 07:45:57 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:references; b=ONXlVTHkz6UvEk+Sd7Lhczyo13TEqiUT1LruQiBhUosT9rEcpUluOIpKtzpESzEPHbzrxW1oziD0Heibw4UtVLa1mbGeuRt1xXyIBcJ7llwk3QIdFI5dyIh5wPSxgT9xu9cMu/taSr/WMme+JK2vO5W+++UScJzRquGOM/TkmEY= Received: by 10.38.88.22 with SMTP id l22mr897381rnb; Wed, 09 Mar 2005 07:45:57 -0800 (PST) Received: by 10.38.181.68 with HTTP; Wed, 9 Mar 2005 07:45:56 -0800 (PST) Message-ID: <5d2cf6920503090745383d6c5f@mail.gmail.com> Date: Wed, 9 Mar 2005 10:45:56 -0500 From: Jeff Wirth To: Andrew Lewis In-Reply-To: <20050309152642.39d4616d@linux.site> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit References: <20050309152642.39d4616d@linux.site> cc: freebsd-questions@freebsd.org Subject: Re: Fake Internal IP Address Ranges X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Jeff Wirth List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Mar 2005 15:45:58 -0000 > Does FreeBSD refuse to route fake internal address ranges? > by 'fake' I assume you are referring to RFC1918 (http://www.faqs.org/rfcs/rfc1918.html) > I have a setup as follows: > Ethernet0 (10.0.0.0 address, internet-facing) Having a RFC1918 address as your internet-facing address is not going to work unless you have a 'NAT'ing device in front of it. > Ethernet1 (196.funny address, LAN-facing) > > We had broken our routing to accomodate the funny range, and it was working fine, until we put in the FreeBSD firewall. Tcpdump doesn't see packets for this range arriving anymore on the internet-facing interface... :( > > Is it fBSD thats breaking it? And if so, how can I turn off this behaviour? no OS that I know of (including FreeBSD) treats RFC1918 addresses differently then any other. - jw