From owner-freebsd-questions  Fri Jul  6 11:44:51 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from shumai.marcuscom.com (rdu26-228-058.nc.rr.com [66.26.228.58])
	by hub.freebsd.org (Postfix) with ESMTP id 2592C37B407
	for <questions@FreeBSD.ORG>; Fri,  6 Jul 2001 11:44:47 -0700 (PDT)
	(envelope-from marcus@marcuscom.com)
Received: from localhost (marcus@localhost)
	by shumai.marcuscom.com (8.11.3/8.11.3) with ESMTP id f66IjEP64945;
	Fri, 6 Jul 2001 14:45:14 -0400 (EDT)
	(envelope-from marcus@marcuscom.com)
X-Authentication-Warning: shumai.marcuscom.com: marcus owned process doing -bs
Date: Fri, 6 Jul 2001 14:45:14 -0400 (EDT)
From: Joe Clarke <marcus@marcuscom.com>
To: Eric Long <eric@metrotv.com>
Cc: <questions@FreeBSD.ORG>
Subject: Re: Is this a routing problem?
In-Reply-To: <B76B6F1D.3CDE%eric@metrotv.com>
Message-ID: <20010706144417.F64705-100000@shumai.marcuscom.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

You're ipfw rules aren't diverting anything to natd.  You need a rules
like:

/sbin/ipfw add divert natd all from any to any via eth0

In your firewall rules.

Joe Clarke

On Fri, 6 Jul 2001, Eric Long wrote:

> I am at a loss with this setup, any suggestions are welcome:
>
> Details:
> Running Freebsd 4.3-RELEASE, ipfw, natd, dhcpd, and gateway is enabled
>
> I'm running this box with two NIC's and an Emerging Technologies card that
> functions as a router.  The Emerging Technologies card (eth0) is the WAN
> interface, one of the NIC's (fxp1) is the LAN interface.  Nothing on the LAN
> interface can access the internet (via the WAN interface).
>
> What I know:
> 1.)  Traffic gets to the FreeBSD box from the WAN interface.
> 2.)  Traffic goes out the WAN interface from the FreeBSD box
> 3.)  Traffic goes out the LAN interface from the FreeBSD box (workstations
> are assigned ip's via dhcpd therefore telling me that they are seeing the
> box on the network via the LAN interface), plus I can also ping these boxes
> when they are assigned an IP
> 4.)  Traffic does NOT go out the WAN interface from the LAN interface (no
> workstation can reach the net).
>
> Problem:
> Is this a routing issue?  Traffic simply isn't being passed from the LAN
> interface to the WAN interface.
>
> My routing tables:
>
> % netstat -r -n
> Routing tables
>
> Internet:
> Destination        Gateway            Flags     Refs     Use     Netif
> Expire
> default            65.114.176.41      UGSc        6    24630     eth0
> 65.114.176.41      65.114.176.42      UH          5        2     eth0
> 127.0.0.1          127.0.0.1          UH          0        4      lo0
> 192.168.1          link#2             UC          0        0     fxp1 =>
>
> eth0 is 65.114.176.42
> fxp1 is 192.168.1.1
>
> Pertinent details from /etc/rc.conf:
> gateway_enable="YES"
> firewall_enable="YES"
> firewall_type="open"
> natd_enable="YES"
> natd_interface="eth0"
> natd_flags="-f /etc/natd.conf"
>
> ipfw details:
> % ipfw list
> 00100 allow ip from any to any via lo0
> 00200 deny ip from any to 127.0.0.0/8
> 00300 deny ip from 127.0.0.0/8 to any
> 65000 allow ip from any to any
> 65535 deny ip from any to any
>
> -Eric
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message