From owner-freebsd-questions@FreeBSD.ORG Fri Mar 31 06:53:42 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 319AF16A422 for ; Fri, 31 Mar 2006 06:53:42 +0000 (UTC) (envelope-from norgaard@locolomo.org) Received: from strange.daemonsecurity.com (59.Red-81-33-11.staticIP.rima-tde.net [81.33.11.59]) by mx1.FreeBSD.org (Postfix) with ESMTP id 61F4943D48 for ; Fri, 31 Mar 2006 06:53:40 +0000 (GMT) (envelope-from norgaard@locolomo.org) Received: from [172.24.8.84] (generic.ATOSORIGIN.ES [212.170.156.200]) by strange.daemonsecurity.com (Postfix) with ESMTP id 0CCF62E04B; Fri, 31 Mar 2006 08:53:48 +0200 (CEST) Message-ID: <442CD1EE.4040002@locolomo.org> Date: Fri, 31 Mar 2006 08:53:34 +0200 From: Erik Norgaard User-Agent: Thunderbird 1.5 (X11/20060118) MIME-Version: 1.0 To: "Daniel A." References: <5ceb5d550603300923i6eeaec35rb65cce6a602a8ef9@mail.gmail.com> In-Reply-To: <5ceb5d550603300923i6eeaec35rb65cce6a602a8ef9@mail.gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Cc: "freebsd-questions@freebsd.org" Subject: Re: ipf and ipnat stopped working, no routing between nics. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 31 Mar 2006 06:53:42 -0000 Daniel A. wrote: > Hi, > I run a FreeBSD 6.0 at home in my closet. > Yesterday, while I was linking IRCd services with a friend of mine, my router > completely stopped routing any packets between the internal nic (sis0) and > the external nic (rl0). > The only thing that I can think of, whoich could have caused this, is that I > ran ettercap on the server to diagnose why our servers wouldnt link. I did NOT > run any ARP poisoning or DNS spoofing attacks on myself. > But I didnt notice if the routing stopped at that point, or later, because I > could always connect to my server, and the server could always connect to the > internet. The situation is still the same. > > I have tried to do > - "ipf -Fa -f /etc/ipf.rules; ipnat -FC -f /etc/ipnat.rules" - Didnt help > - "cd /etc/rc.d; ./ipfilter restart; ./ipnat restart" - Didnt help > - Launch ettercap again and exit "cleanly" after telling it to stop sniffing. > A tcpdump reveals that, indeed, no packets at all make it from sis0 to rl0. > So my conclusion is that ipnat "forgot" how to route between the two > interfaces. > > Could anyone please give some pointers? did you check # sysctl -a |grep forward you should have net.inet.ip.forwarding: 1 net.inet.ip.fastforwarding: 0 net.inet6.ip6.forwarding: 0 Erik -- Ph: +34.666334818 web: www.locolomo.org S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt Subject ID: 9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72 Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9