Date: Thu, 15 Aug 2002 21:00:42 -0700 From: "Philip J. Koenig" <pjklist@ekahuna.com> To: questions@FreeBSD.ORG Subject: IPF/routing question Message-ID: <20020816040044002.AAA319@empty1.ekahuna.com@dyn205.ekahuna.com>
next in thread | raw e-mail | index | archive | help
Trying to build a firewall out of a FreeBSD box using IPfilter.
Current problem pertains to routing, not having played with routing
on FreeBSD before, I think I'm doing something wrong syntax-wise.
(spartan manpage for 'route' doesn't help)
Here's the setup (public IP addresses changed):
ISP
| 1.1.1.1
| (routable addresses)
| 1.1.1.2
|----------|
| | Router
|----------|
| 10.1.1.1
| (RFC 1918 private addresses)
| 10.1.1.2
|----------|
| | FreeBSD / IPfilter
|----------|
| 2.2.2.1
| (routable addresses)
|
LAN (2.2.2.0/24)
The router has been configured with a default route pointing to its
external interface, and connectivity works fine from the router to
the internet. A static route has been configured to get to
2.2.2.0/24 via 10.1.1.2.
Started out on the BSD box configuring the default gateway in rc.conf
as 10.1.1.1, but that didn't seem to help. rc.conf contains a
"gateway enable" statement.
Tried the following variations, but the route either doesn't show up
as expected in the routing table, or the machine locks-up trying to
display the routing table. (netstat -r)
route add default 10.1.1.1
route add 0.0.0.0 10.1.1.1
route add -interface default 10.1.1.1
(can't figure out from the manpage exactly what the -interface
command actually does, or if it needs add'l arguments, but it appears
to help prevent the machine from locking up while displaying the
routing table)
I can ping 10.1.1.2 and 1.1.1.2 from the FreeBSD box, but not beyond,
so I assume this is a default route problem.
Thanks for your suggestions,
Phil
--
Philip J. Koenig
pjklist@ekahuna.com
Electric Kahuna Systems -- Computers & Communications for the New
Millenium
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020816040044002.AAA319>