From owner-freebsd-questions Fri Jun 1 6:22:56 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mail.bigstudios.com (mail.bigstudios.com [216.126.75.201]) by hub.freebsd.org (Postfix) with ESMTP id C546137B42C for ; Fri, 1 Jun 2001 06:22:48 -0700 (PDT) (envelope-from sam@bigstudios.com) Received: from bigstudios.com([192.168.75.105]) (4053 bytes) by mail.bigstudios.com via sendmail with P:esmtp/R:bind_hosts/T:smtp (sender: ) id for ; Fri, 1 Jun 2001 09:11:42 -0400 (EDT) (Smail-3.2.0.111 2000-Feb-17 #1 built 2000-Jul-5) Message-ID: <3B17983A.6B11168D@bigstudios.com> Date: Fri, 01 Jun 2001 09:27:22 -0400 From: Sam Suh X-Mailer: Mozilla 4.77 [en] (WinNT; U) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: Re: Gateway oddness References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi, did you checked your resolv.conf? John wrote: > > Hi All... > > Until yesterday, I had to boxes existing happily together. There's a > win box hooked up to, and talking to, a FreeBSD 4.3 box. The BSD box has, > for 3 years (going through many version changes) as a DNS server, web > server, mail server, Samba server, and, most importantly, gateway. I have > NAT running, as well as IPFW. Up till yesterday, all was great. Then, > today, I had a change in IP's, and a change in the gateway downstream from > me. Now, I have this problem: > > FBSD --> Internet works > FBSD --> Winbox works > Winbox --> FBSD works > Winbox --> Anything past the FBSD Box doesn't work > > I've changed nothing but the IP address in rc.firewall and rc.conf. I'm > guessing I'm missing something simple, but i'm stumped... any thoughts or > advice? I've pasted more info below. > > Thanks!!! > --John > > ipfw show indicates nat is running: > > 00050 21392 9668930 divert 8668 ip from any to any via fxp0 > > while trying to do a traceroute from the windows box, tcpdump on the > internal interface shows: > > tcpdump: listening on fxp0^M > 200:03:09.004449 arp who-has merlin.wondermutt.net tell > morgaine.wondermutt.net^ > M > 00:03:09.004528 arp reply merlin.wondermutt.net is-at 0:a0:c9:6c:a9:23^M > 00:03:09.004745 morgaine.wondermutt.net.1044 > roaming-171-125.nss.udel.edu.domain: 1+ A? www.udel.edu. (30)^M > 00:03:09.007423 roaming-171-125.nss.udel.edu.domain > morgaine.wondermutt.net.1044: 1 1/4/4 A www.udel.edu (197)^M > 00:03:09.013176 morgaine.wondermutt.net > www.udel.edu: icmp: echo request [ttl 1]^M > 00:03:09.013614 merlin.wondermutt.net > morgaine.wondermutt.net: icmp: time exceeded in-transit^M > 00:03:09.014865 morgaine.wondermutt.net > www.udel.edu: icmp: echo request [ttl 1]^M > 00:03:09.015266 merlin.wondermutt.net > morgaine.wondermutt.net: icmp: time exceeded in-transit^M > 00:03:09.020376 morgaine.wondermutt.nnet > www.udel.edu: icmp: echo request [ttl 1]^M > > The same traceroute on the external interface shows: > > 00:04:09.607173 arp who-has host125-4.student.udel.edu tell crc-7k-e-0-0-sub3.nss.udel.edu^M > 00:04:09.754853 211.247.251.113.9129 > roaming-171-128.nss.udel.edu.9001: udp 15^M > 00:04:10.228012 roaming-171-125.nss.udel.edu.novell-lu6.2 > strauss.udel.edu.domain: 4021+ PTR? 4.152.175.128.in-addr.arpa. (44)^M > 00:04:10.230594 strauss.udel.edu.domain > > roaming-171-125.nss.udel.edu.novell-lu6.2: 4021* 1/4/4 (235) (DF)^M > 00:04:10.234729 roaming-171-175.nss.udel.edu.novell-lu6.2 > strauss.udel.edu.domain: 46982+ PTR? 1.152.175.128.in-addr.arpa. (44)^M > 00:04:10.237011 strauss.udel.edu.domain > > roaming-171-125.nss.udel.edu.novell-lu6.2: 46982* 1/4/4 (239) (DF)^M > 00:04:10.242620 roaming-171-125.nss.udel.edu.novell-lu6.2 > > strauss.udel.edu.dom > ain: 40368+ PTR? 156.171.175.128.in-addr.arpa. (46)^M > 00:04:10.244894 strauss.udel.edu.domain > > roaming-171-125.nss.udel.edu.novell-lu6.2: 40368* 1/4/4 (239) (DF)^M > 00:04:10.249169 roaming-171-175.nss.udel.edu.novell-lu6.2 > strauss.udel.edu.dom > ain: 42641+ PTR? 113.251.247.211.in-addr.arpa. (46)^M > 00:04:10.540513 strauss.udel.edu.domain > > roaming-171-125.nss.udel.edu.novell-lu > 6.2: 42641 NXDomain* 0/1/0 (101) (DF)^M > 2^H ^H200:04:11.027365 211.117.115.147.9001 > roaming-171-156.nss.udel.edu.9001: > udp 23^ > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message