From: Chris <97Efcw@alumni.ee.ust.hk> To: freebsd-questions@FreeBSD.ORG Subject: [Fwd: Found! Re: natd: failed to write packet back] Message-ID: <391EA5AE.86617E1F@alumni.ee.ust.hk>
next in thread | raw e-mail | index | archive | help
Hi all,
Thanks for the clues. Sorry that I forgot to check the archive first.
After running natd in verbose, I found that my box was trying to connect
to 192.168.128.3, which was denied by ipfw. Further investigating found
that that ip was given by my ISP during dhcp ("option
dhcp-server-identifier 192.168.128.3"). Seems it is time to complain my
ISP.
By the mean time, it is advisable for me to add a ipfw rule before
DIVERT to discard those traffic earlier and to avoid the message?
BTW, why can't these information logged in the natd log file?
Thanks for help.
Chris
Glenn Johnson wrote:
>
> On Sat, May 13, 2000 at 08:29:18PM +0800, Chris wrote:
>
> > Hi,
> >
> > I am using a freebsd box as a gateway to connect to internet. It is
> > running natd. I find in the /var/log/messages that "natd[13276]:
> > failed to write packet back (Permission denied)" quite often. I try
> > to enable the log of natd, but nothing special here. I also check my
> > firewall log but nothing is denied. Any clues?
> >
> > The box is running 4.0-stable cvsup'ed month ago.
>
> I believe there is some discussion of this error in the mail archives so
> you may want to check there.
>
> You do not say what type of firewall you are running, "OPEN, CLIENT,
> SIMPLE" as defined in /etc/rc.conf so it could be any number of
> things. You could run natd in verbose mode and watch the output so you
> can see what natd is doing. There is a good chance that ICMP traffic is
> causing the error.
>
> Hope that helps.
>
> --
> Glenn Johnson
> glennpj@bayouhome.net
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?391EA5AE.86617E1F>