From owner-freebsd-questions  Thu Jul  6 16:53:35 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from mail.gmx.net (pop.gmx.net [194.221.183.20])
	by hub.freebsd.org (Postfix) with SMTP id C80FB37BA3B
	for <freebsd-questions@FreeBSD.ORG>; Thu,  6 Jul 2000 16:53:27 -0700 (PDT)
	(envelope-from pirol9999@gmx.net)
Received: (qmail 30434 invoked by uid 0); 6 Jul 2000 23:53:25 -0000
Received: from pc19f5f86.dip0.t-ipconnect.de (HELO gmx.net) (193.159.95.134)
  by mail.gmx.net with SMTP; 6 Jul 2000 23:53:25 -0000
Date: Fri, 7 Jul 2000 01:55:09 +0200
From: Jens Sauer <pirol9999@gmx.net>
Reply-To: Jens Sauer <pirol9999@gmx.net>
To: freebsd-questions@FreeBSD.ORG
Subject: IPFW-question
X-Mailer: Jens Sauer's registered AK-Mail 3.1 publicbeta2a [ger]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <20000706235327.C80FB37BA3B@hub.freebsd.org>
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Hi all,

i am using ipfw for the very first time and have the following problem:

i configured my kernel with FIREWALL- and IPDIVERT-support fot NATD, 
because of my private-address-clients.

my rc.conf looks that way:

	...
	**ISDN-things**
	...
	natd_enable="YES"
	natd_interface="isp0"
	natd_flags="-dynamic"
	firewall_enable="YES"
	gateway_enable="YES"

my isdn-interface ISP0 is working fine, when i ping the internet from
the firewall, it dials, all ok.

but when i traceroute into the internet from a LAN-client (192.168.0.x),
the isdn-card on the firewall is successfully dialing (interface is up),
but the packets are only going up to the network-card on the firewall,
then i get a timeout.

I configured IPFW like that:

	ipfw -f flush
	ipfw add pass all from any to any
	ipfw add divert natd all from any to any via isp0

Or do i have to add the option "IP_FIREWALL_FORWARD" into kernel (because
at boottime he's telling me: ...default to deny .... rule-based forwarding
disabled...)? but i thought, this would only be for a transparent proxy?

Please help a bloody newbie  :-)
Thanks


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message