Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 13 Jan 1997 13:44:47 +0000 ()
From:      Chris Coleman <chris@mail.bb.cc.wa.us>
To:        Darren Reed <avalon@coombs.anu.edu.au>
Cc:        Mark Tinguely <tinguely@plains.nodak.edu>, brian@awfulhak.demon.co.uk, hackers@FreeBSD.org
Subject:   Re: IPFILTER
Message-ID:  <Pine.BSF.3.91.970113134059.1019B-100000@mail.bb.cc.wa.us>
In-Reply-To: <199701131339.NAA01025@mail.bb.cc.wa.us>

next in thread | previous in thread | raw e-mail | index | archive | help


On Tue, 14 Jan 1997, Darren Reed wrote:

> > >  in the FBSD box i have two network cards.
> > >  		fxp0 inet 208.8.136.10
> > >  		fxp1 inet 10.16.14.1
> > >  
> 
> ICMP is now (but it doesn't rewrite the headers in error packets).
> 
> > Also, to get a successful remapping for IP application, be sure that you
> > turned on the IP forwarding on the NAT host (ie:
> >  
> >  sysctl -w net.inet.ip.forwarding=1
> >  
> > ).
Ok, I added the sysctl and it still doesn't work.
Do i have to run GATED? 
Do i have to set up IFCONFIG special?
Do i need ARP_PROXYALL in the kernel?

Im using telnet to test this. 
Im telnetting from the client on 10.16.14.10 to a host 208.8.136.4

i know im close to getting this.
i really appreciate the help.
> 
> even better, for things like ftp which have address data in the TCP stream,
> use a proxy.
> 
> Darren
> 
Thanks
Chris



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.91.970113134059.1019B-100000>