From owner-freebsd-questions  Thu Jun 14  5:46:32 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from mail.cult.cu (mail.cult.cu [169.158.120.2])
	by hub.freebsd.org (Postfix) with ESMTP id 8100537B409
	for <freebsd-questions@freebsd.org>; Thu, 14 Jun 2001 05:46:09 -0700 (PDT)
	(envelope-from admin@atenas.cult.cu)
Received: from mail by mail.cult.cu with local-bsmtp (Exim 3.03 #2)
	id 15AWVA-0006gK-00; Thu, 14 Jun 2001 08:45:32 -0400
Received: from [169.158.120.178] (helo=mail.atenas.cult.cu)
	by mail.cult.cu with esmtp (Exim 3.03 #2)
	id 15AWV2-0006ez-00; Thu, 14 Jun 2001 08:45:24 -0400
Received: from mail.atenas.cult.cu ([169.158.120.179] helo=proxy.atenas.cult.cu)
	by mail.atenas.cult.cu with smtp (Exim 3.22 #2)
	id 15AWXo-0008Vc-00; Thu, 14 Jun 2001 08:48:16 -0400
From: Manolo Valdes <admin@atenas.cult.cu>
To: "Jason Prosser" <jprosser@teraglobal.com>,
	<freebsd-questions@FreeBSD.ORG>
Subject: Re: natd/ipfw help...
Date: Thu, 14 Jun 2001 08:41:58 -0400
X-Mailer: KMail [version 1.0.28]
Content-Type: text/plain;
  charset="US-ASCII"
References: <B74D2CDE.3FC%jprosser@teraglobal.com>
In-Reply-To: <B74D2CDE.3FC%jprosser@teraglobal.com>
MIME-Version: 1.0
Message-Id: <01061408444200.01859@proxy.atenas.cult.cu>
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Wed, 13 Jun 2001, Jason Prosser wrote:
> I am using 4.3-Release, and I can't seem to get natd and ipfw properly
> configured. (Yes I am a newbe... =) AND PROUD OF IT! )
> 
> I am trying to setup just a basic configuration right now for some network
> performance testing in our lab... Both networks are standalone, so above
> getting the Nat & some basic firewall rules so that all traffic is passed. I
> am not concerned about security.
> 
> The configuration that I am trying to setup is:
> 
> Network A:(Public)   <--->  NAT/Firewall    <--->   Network B:(Private)
> 
> 
> The Nat/Firewall computer has two ethernet cards xl0 & xl1.
> 
> I've trimmed down the kernel to just what I need. (Yes I did add in
> ipfirewall, ipfirewall_verbose, & ipdivert.)
> 
> In rc.conf I have: (Above basic information)
> natd -n xl1
> firewall_enable="YES"
> firewall_type="UNKNOWN"

put firewall_type="open"
read the rc.firewall script and you'll figure out.

> ifconfig_xl1="inet 10.2.0.1 netmask 255.255.255.0"
> ifconfig_xl0="inet 192.168.13.1 netmask 255.255.255.0"
> 
> Firewall rules for right now is
> ipfw -f flush
> ipfw add divert natd tcp from any to any via xl1
> ipfw add divert natd udp from any to any via xl1
> ipfw add allow ip from any to any via xl1
> ipfw add allow ip from any to any via xl0
> ipfw add allow icmp from any to any via xl0
> ipfw add allow icmp from any to any via xl1
> 
> I figure that I am missing something stupid, but I don't know enough yet to
> figure it out... Thank you for the help ahead of time.
> 
> JP
> jprosser@teraglobal.com

Manolito

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message