From owner-freebsd-questions Sat Mar 24 15:59:31 2001 Delivered-To: freebsd-questions@freebsd.org Received: from hotmail.com (f234.law7.hotmail.com [216.33.237.234]) by hub.freebsd.org (Postfix) with ESMTP id B0C8D37B719 for ; Sat, 24 Mar 2001 15:59:27 -0800 (PST) (envelope-from asailkat@hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Sat, 24 Mar 2001 15:59:27 -0800 Received: from 64.160.131.234 by lw7fd.law7.hotmail.msn.com with HTTP; Sat, 24 Mar 2001 23:59:27 GMT X-Originating-IP: [64.160.131.234] From: "Robin Lo" To: freebsd-questions@FreeBSD.ORG Cc: adamlau@yahoo.com Subject: NAT questions Date: Sat, 24 Mar 2001 15:59:27 -0800 Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_4ecd_3097_2d64" Message-ID: X-OriginalArrivalTime: 24 Mar 2001 23:59:27.0435 (UTC) FILETIME=[757DF9B0:01C0B4BE] Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG This is a multi-part message in MIME format. ------=_NextPart_000_4ecd_3097_2d64 Content-Type: text/html

Hello,

I have set up FreeBSD 4.2 to be used for NAT.  I have 2 NIC cards configured for the network.  The internal network is configured with--10.0.0.0/8, and the second NIC with it's ISP default settings.  The external NIC has been tested.  I am able to ping to the outside world.  I support an internal network with an NT2000 Server used for DNS, DHCP, and Active Directory services supporting serveral Windows /Pro/NT40/ and 98 clients.  When running the NAT box i get these messages that appear accross the screen.  It occurs while working in vi or any other programs.

March 24  03:36:39 firewall /kernel:  Connection attempt to UDP 64.160.131.xx9:138 from 64.160.131.xx8:138

March 24  03:36:39 firewall /kernel:  Connection attempt to UDP 10.255.255.255:138 from 10.10.1.1:138

March 24  03:36:39 firewall /kernel:  Connection attempt to UDP 10.255.255.255:138 from 10.10.1.3:138

March 24  03:58:38 firewall last message repeated 2 times

******By the way, my Win2k server services DHCP addresses that range from:

10.10.1.1-50

255.0.0.0.0

Besides reconfiguring the ipnat.rules subnet from 255.255.255.0 to 255.0.0.0

What else do u suggust?

Please help...

****note**** we have been provided with 5 static IP address from our isp.  the range is 64.160.131.xx4-

64.160.131.xx8

attached are rc.conf and ipnat.rules


Get your FREE download of MSN Explorer at http://explorer.msn.com

------=_NextPart_000_4ecd_3097_2d64 Content-Type: application/octet-stream; name="rc.conf.new.bak" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="rc.conf.new.bak" I1N0YXJ0dXAgc2NyaXB0cwpsb2NhbF9zdGFydHVwPSIvdXNyL2xvY2FsL2V0 Yy9yYy5kIgoKI0Jhc2ljIG5ldHdvcmsgb3B0aW9ucwpob3N0bmFtZT0iZmly ZXdhbGwudXNhc3BvcnRzcGljayIKbmV0d29ya19pbnRlcmZhY2VzPSJsbzAg eGwwIHhsMSIgCmlmY29uZmlnX2xvMD0iaW5ldCAxMjcuMC4wLjEiCQppZmNv bmZpZ194bDA9ImluZXQgNjQuMTYwLjEzMS54eHggbmV0bWFzayAyNTUuMjU1 LjI1NS54eHgiIAppZmNvbmZpZ194bDE9ImluZXQgMTAuMC4wLjEgbmV0bWFz ayAyNTUuMC4wLjAiIApkZWZhdWx0cm91dGVyPSI2NC4xNjAuMTMxLnh4eCIK CiNGaXJld2FsbC9zZWN1cml0eSBvcHRpb25zCmlwZmlsdGVyX2VuYWJsZT0i WUVTIgojaXBmaWx0ZXJfcHJvZ3JhbT0iL3NiaW4vaXBmIC1GYSAtZiIJIyBQ dXJnZSBpcGYgYW5kIG1ha2UgYWxsIGluc3RhbGwgY2xlYW4KaXBmaWx0ZXJf cnVsZXM9Ii9ldGMvaXBmLnJ1bGVzIgppcGZpbHRlcl9mbGFncz0iIgppcG5h dF9lbmFibGU9IllFUyIKaXBuYXRfcnVsZXM9Ii9ldGMvaXBuYXQucnVsZXMi CmlwbW9uX2VuYWJsZT0iWUVTIgkJCQkJCmlwbW9uX2ZsYWdzPSItRCAvdmFy L2xvZy9pcGZsb2ciCmxvZ19pbl92YWluPSJZRVMiCnRjcF9kcm9wX3N5bmZp bj0iWUVTIgkJCnRjcF9yZXN0cmljdF9yc3Q9IllFUyIJCQppY21wX2Ryb3Bf cmVkaXJlY3Q9IllFUyIKaWNtcF9sb2dfcmVkaXJlY3Q9IllFUyIKCiNOZXR3 b3JrIGRhZW1vbiBvcHRpb25zCiNzc2hkX2VuYWJsZT0iTk8iCQkJIyBMb2Nh bCBjb25zb2xlIGFjY2Vzcwojc3NoZF9wcm9ncmFtPSIvdXNyL3NiaW4vc3No ZCIKI3NzaGRfZmxhZ3M9IiIKCiNOZXR3b3JrIHJvdXRpbmcgb3B0aW9ucwpz dGF0aWNfcm91dGVzPSIwIDEgMiAzIgpyb3V0ZV8wPSItbmV0IDEwLjAuMC4y IC1uZXRtYXNrIDI1NS4yNTUuMjU1LjAgLWludGVyZmFjZSA2NC4xNjAuMTMx Lnh4eCIKcm91dGVfMT0iLW5ldCAxMC4wLjAuMyAtbmV0bWFzayAyNTUuMjU1 LjI1NS4wIC1pbnRlcmZhY2UgNjQuMTYwLjEzMS54eHgiCnJvdXRlXzI9Ii1u ZXQgMTAuMC4wLjQgLW5ldG1hc2sgMjU1LjI1NS4yNTUuMCAtaW50ZXJmYWNl IDY0LjE2MC4xMzEueHh4Igpyb3V0ZV8zPSItbmV0IDEwLjAuMC41IC1uZXRt YXNrIDI1NS4yNTUuMjU1LjAgLWludGVyZmFjZSA2NC4xNjAuMTMxLnh4eCIK Cgojcm91dGVfMD0iLW5ldCAxMC4xNjAuMC4wIDEwLjAuMS4xMCAtbmV0bWFz ayAyNTUuMjU1LjAuMCIgCiNyb3V0ZV8xPSItbmV0IDEwLjE2MS4wLjAgMTAu MC4xLjEwIC1uZXRtYXNrIDI1NS4yNTUuMC4wIgojcm91dGVfMj0iLW5ldCAx MC4xNjIuMC4wIDEwLjAuMS4xMCAtbmV0bWFzayAyNTUuMjU1LjAuMCIKI3Jv dXRlXzI9Ii1uZXQgMTAuMTYyLjAuMCAxMC4wLjEuMTAgLW5ldG1hc2sgMjU1 LjI1NS4wLjAiCgojcm91dGVfMDA9IiAtbmV0IDE2LjY0LjAuMCAtaW50ZXJm YWNlIDY0LjE2MC4xMzEueHh4Igojcm91dGVfMTY9IiAtbmV0IDE2LjY0LjE2 LjAgLWludGVyZmFjZSA2NC4xNjAuMTMxLnh4eCIKI3JvdXRlXzMyPSIgLW5l dCAxNi42NC4zMi4wIC1pbnRlcmZhY2UgNjQuMTYwLjEzMS54eHgiCgoKZ2F0 ZXdheV9lbmFibGU9IllFUyIKI3JvdXRlcl9lbmFibGU9Ik5PIgkJIyBTZXQg dG8gWUVTIHRvIGVuYWJsZSBhIHJvdXRpbmcgZGFlbW9uCiNyb3V0ZXI9InJv dXRlZCIJCSMgTmFtZSBvZiByb3V0aW5nIGRhZW1vbiB0byB1c2UgaWYgZW5h YmxlZAojcm91dGVyX2ZsYWdzPSItcSIJCSMgRmxhZ3MgZm9yIHJvdXRpbmcg ZGFlbW9uCiNmb3J3YXJkX3NvdXJjZXJvdXRlPSJOTyIJIyBEbyBzb3VyY2Ug cm91dGluZyAob25seSBpZiBnYXRld2F5X2VuYWJsZSBpcyBzZXQgdG8gIllF UyIpCiNhY2NlcHRfc291cmNlcm91dGU9Ik5PIgkjIEFjY2VwdCBzb3VyY2Ug cm91dGVkIHBhY2tldHMgdG8gdXMKCiNTeXN0ZW0gY29uc29sZSBvcHRpb25z CnNhdmVyPSJ5ZXMiIApzYXZlcj0iZmlyZSIKYmxhbmt0aW1lPSIyMDAiCgoj TWlzY2VsbGFuZW91cyBhZG1pbmlzdHJhdGl2ZSBvcHRpb25zCmNyb25fZW5h YmxlPSJOTyIJCSMgCnNlbmRtYWlsX2VuYWJsZT0iTk8iCmtlcm5fc2VjdXJl bGV2ZWxfZW5hYmxlPSJZRVMiCmtlcm5fc2VjdXJlbGV2ZWw9IjIiCiNhY2Nv dW50aW5nX2VuYWJsZT0iTk8iCQkjIEFjY291bnRpbmc/CiNsaW51eF9lbmFi bGU9Ik5PIgkJIyBUcmlwd2lyZT8KI3N2cjRfZW5hYmxlIk5PIgkJIyBQcmFj dGljZSBTUlY0IGNvbW1hbmRz ------=_NextPart_000_4ecd_3097_2d64 Content-Type: application/octet-stream; name="ipnat.rules.rules" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="ipnat.rules.rules" bWFwIHhsMCAxMC4wLjAuMC84IC0+IDY0LjE2MC4xMzEuMjM0LzMyIHBvcnRt YXAgdGNwL3VkcCAxMDAwMDo2NTAwMAptYXAgeGwwIDEwLjAuMC4wLzggLT4g NjQuMTYwLjEzMS4yMzQvMzIKI3JkciB4bDAgNjQuMTYwLjEzMS4yMzcvMzIg cG9ydCA4MCAtPiAxMC4wLjAuMSBwb3J0IDgwIHRjcCAK ------=_NextPart_000_4ecd_3097_2d64-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message