From owner-freebsd-questions@FreeBSD.ORG Sat Apr 12 18:15:01 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D014E37B401 for ; Sat, 12 Apr 2003 18:15:01 -0700 (PDT) Received: from smtp-out.comcast.net (smtp-out.comcast.net [24.153.64.116]) by mx1.FreeBSD.org (Postfix) with ESMTP id D794A43F93 for ; Sat, 12 Apr 2003 18:14:59 -0700 (PDT) (envelope-from johnc909@comcast.net) Received: from [12.235.33.25] (12-235-33-25.client.attbi.com [12.235.33.25]) by mtaout08.icomcast.net (iPlanet Messaging Server 5.2 HotFix 1.14 (built Mar 18 2003)) with ESMTP id <0HD90098FCRDA3@mtaout08.icomcast.net> for freebsd-questions@freebsd.org; Sat, 12 Apr 2003 21:14:02 -0400 (EDT) Date: Sat, 12 Apr 2003 18:14:21 -0700 From: John C To: freebsd-questions@freebsd.org Message-id: MIME-version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT User-Agent: Microsoft-Entourage/10.0.0.1309 Subject: Trouble configuring network gateway X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Apr 2003 01:15:02 -0000 Hello, I am attempting to turn a PC into a gateway/firewall for my home network. My ISP is Comcast ... So whatever ramifications therein, for better or worse, apply to my predicament ... I've gotten both interfaces up and working, but I can't seem to get it to switch packets from within the subnet out into the internet. The kernel is pretty much GENERIC 4.7, except with the GATEWAY option set, plus with net.link.ether.bridge=1 In sysctl.conf My configuration is as follows: Gateway machine: "argonath" External network interface: sis0 12.235.54.203 (netgear card, ip provided by DHCP) Default route: 12.235.54.129 (presumably my cable modem) Private subnet interface: rl0 192.168.0.1 Secondary subnetted machine "shelob": Interface 192.168.0.2 Default route: 192.168.0.1 I can ping & ssh to "argonath" from "shelob", and can reach the internet from argonath's rl0 ... But like I said, the gateway action isn't happening. One other thing I found odd is that when my secondary machine is plugged directly into the Comcast subnet, it reports a default route of 12.235.36.1, which seems more right, but I don't have experience enough in these matters to say, and what documentation I've found isn't specific enough to give me a clue about how to solve this problem ... Please help? Thanks, John