From owner-freebsd-questions@freebsd.org Wed Nov 1 14:14:18 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5A732E5CDC2 for ; Wed, 1 Nov 2017 14:14:18 +0000 (UTC) (envelope-from trond@fagskolen.gjovik.no) Received: from smtp.fagskolen.gjovik.no (smtp.fagskolen.gjovik.no [IPv6:2001:700:1100:1:200:ff:fe00:b]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.fagskolen.gjovik.no", Issuer "Fagskolen i Gj??vik" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id E3099703B2 for ; Wed, 1 Nov 2017 14:14:17 +0000 (UTC) (envelope-from trond@fagskolen.gjovik.no) Received: from mail.fig.ol.no (localhost [127.0.0.1]) by mail.fig.ol.no (8.15.2/8.15.2) with ESMTPS id vA1EDd5O049726 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Wed, 1 Nov 2017 15:13:40 +0100 (CET) (envelope-from trond@fagskolen.gjovik.no) Received: from localhost (trond@localhost) by mail.fig.ol.no (8.15.2/8.15.2/Submit) with ESMTP id vA1EDdrl049723; Wed, 1 Nov 2017 15:13:39 +0100 (CET) (envelope-from trond@fagskolen.gjovik.no) X-Authentication-Warning: mail.fig.ol.no: trond owned process doing -bs Date: Wed, 1 Nov 2017 15:13:39 +0100 (CET) From: =?ISO-8859-1?Q?Trond_Endrest=F8l?= Sender: Trond.Endrestol@fagskolen.gjovik.no To: Bernt Hansson cc: "freebsd-questions@freebsd.org" Subject: Re: Upgrade and problem In-Reply-To: <603c2b51-b45d-b545-bf71-b5af16e2eaf9@bananmonarki.se> Message-ID: References: <5224d18b-0346-f2db-3ca9-8a7b4128c250@bananmonarki.se> <603c2b51-b45d-b545-bf71-b5af16e2eaf9@bananmonarki.se> User-Agent: Alpine 2.21 (BSF 202 2017-01-01) Organization: Fagskolen Innlandet OpenPGP: url=http://fig.ol.no/~trond/trond.key MIME-Version: 1.0 X-Spam-Status: No, score=-2.2 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on mail.fig.ol.no Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8BIT X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Nov 2017 14:14:18 -0000 On Wed, 1 Nov 2017 14:35+0100, Bernt Hansson wrote: > On 11/01/17 14:28, Trond Endrestøl wrote: > > On Wed, 1 Nov 2017 13:59+0100, Bernt Hansson wrote: > > > > > Installed 11.0R yesterday but can't get gateway_enable="yes" > > > to function. With or without firewall (ipfilter) > > > > > > From the gateway i can ping and traceroute fine. But not from > > > any machine inside the lan. The packets can't "get out" > > > > > > So what to look for? > > Any NAT44 setup? > No. Is that needed? It largerly depends on the address space on the inside. If you didn't need NAT44 before, and nothing's changed, then no. -- Trond. From owner-freebsd-questions@freebsd.org Wed Nov 1 14:58:52 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3FEBEE5DA53 for ; Wed, 1 Nov 2017 14:58:52 +0000 (UTC) (envelope-from amvandemore@gmail.com) Received: from mail-io0-x235.google.com (mail-io0-x235.google.com [IPv6:2607:f8b0:4001:c06::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 075D8716F6 for ; Wed, 1 Nov 2017 14:58:52 +0000 (UTC) (envelope-from amvandemore@gmail.com) Received: by mail-io0-x235.google.com with SMTP id 189so6593942iow.10 for ; Wed, 01 Nov 2017 07:58:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=brnmrCHhcdvUbTBmQmsvQK8tXYKA+fquTGg0fb0H+qE=; b=MTwUlFlpBCoycMiHfQswqJ4hJnCF0PAB41YaT1jew5wUjco7x5rHWYzO2Gfo6t2mNk fJvTZojLsK+0ZYnAL51UnAFlbYCBWKG0d6xg8Ut0hIYau/nFsv/mvWkgQKoPJWm4EsrR oiJaPDZq28m5kMoqJMkz7iwdeyV2gC56XTfIpvXLuQg9pKICGICahLHbucEGpFgah+Wa etOmlMNhIiZ4RZZzOra9ems4Opcdgqb1YzfMME15oQPwGXffv0Vm3RJnlfFTnEn0MGYS CtprCuD/TcTFmRAgETLJ72njhPeGbXQ6QKBG3ZrxL2C/mOz+OSDMCROe9Qeon+gKLHu2 zOiw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=brnmrCHhcdvUbTBmQmsvQK8tXYKA+fquTGg0fb0H+qE=; b=WzA5qYgif4JYucB7ahW60TnqWOxI2lkPZ/PkT5+tzaqQ9hBz6lfA91nANQk8SHBtyO C3sA5fe38QsDeQdTNN2TnNOXhWgmlKCUBj7PYQlpu4Vc+Nt+DhlBP+vMVnms0mRlD9mp TROgJ7yuPIV1yqStQBya2NwXU91Ul81RIjap0JIQvNiLZc9R87uJjYygDnC+P8K394p2 yVIyhYjqyhBKeNJALKbmh4G/6mg6bTJugqSyYATiA7ZjxgxgC3s4QBtfzqXnJaDH1+0P Zua3RF7c6o9vIWDtg8kGuAAdZA3J+hP1MhdFZE9qpRGJ0QuHts8gSlps0mTMWHErXcgs lE4w== X-Gm-Message-State: AMCzsaVuDYc5pLI+lyKzA1BEU9MoAULxyFdixoGI7gdBizwsZkhEQ32s fy0UPt2fvHlDDGo8NEzRiY8IGh7aXntuMlO5l5M= X-Google-Smtp-Source: ABhQp+QXjF39wvqFJdA3Jn4mPxLvUBXBYfckMjy2j3i9r2OBEA8JlH9C33QO6mUm1OF1gSu7sG5883YiTPSe+cDfYX4= X-Received: by 10.107.47.133 with SMTP id v5mr175545iov.22.1509548331445; Wed, 01 Nov 2017 07:58:51 -0700 (PDT) MIME-Version: 1.0 Received: by 10.2.176.201 with HTTP; Wed, 1 Nov 2017 07:58:50 -0700 (PDT) In-Reply-To: <5224d18b-0346-f2db-3ca9-8a7b4128c250@bananmonarki.se> References: <5224d18b-0346-f2db-3ca9-8a7b4128c250@bananmonarki.se> From: Adam Vande More Date: Wed, 1 Nov 2017 09:58:50 -0500 Message-ID: Subject: Re: Upgrade and problem To: Bernt Hansson Cc: "freebsd-questions@freebsd.org" Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Nov 2017 14:58:52 -0000 On Wed, Nov 1, 2017 at 7:59 AM, Bernt Hansson wrote: > Hello list! > > Installed 11.0R yesterday but can't get gateway_enable="yes" > to function. With or without firewall (ipfilter) > What do you mean you can't get it to function? It sets a sysctl. Is the sysctl set correctly? -- Adam