From owner-freebsd-questions@FreeBSD.ORG  Mon Oct  4 07:29:48 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 68F0A16A4CE
	for <freebsd-questions@freebsd.org>;
	Mon,  4 Oct 2004 07:29:48 +0000 (GMT)
Received: from ms05.mailstreet2003.net (MS05.mailstreet2003.net
	[63.251.155.133])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1491D43D5E
	for <freebsd-questions@freebsd.org>;
	Mon,  4 Oct 2004 07:29:48 +0000 (GMT)	(envelope-from chris@sigd.net)
X-MimeOLE: Produced By Microsoft Exchange V6.5.6944.0
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Mon, 4 Oct 2004 03:28:23 -0400
Message-ID: <6FC9F9894A9F8C49A722CF9F2132FC2201F73FEE@ms05.mailstreet2003.net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Issues with 2 instances of NATD
Thread-Index: AcSp45zWUWm7Tvr1Q0GyztgvguA3zgAABmfQ
From: "Haulmark, Chris" <chris@sigd.net>
To: "Joseph Begumisa" <begj@trueafrican.com>,
	<freebsd-questions@freebsd.org>
Subject: RE: Issues with 2 instances of NATD
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Oct 2004 07:29:48 -0000

=20

> -----Original Message-----
> From: owner-freebsd-questions@freebsd.org=20
> [mailto:owner-freebsd-questions@freebsd.org] On Behalf Of=20
> Joseph Begumisa
> Sent: Monday, October 04, 2004 2:26 AM
> To: freebsd-questions@freebsd.org
> Subject: Issues with 2 instances of NATD
>=20
>=20
> I want traffic from one machine on the LAN with ip address=20
> 169.254.0.18 to=20
> go out through ISP2 and traffic from the rest of the machines=20
> on the LAN=20
> o go through ISP1.  However, traffic from all machines=20
> including that one=20
> goes through ISP1.  Perhaps I'm missing something. Below is=20
> my setup and=20
> configuration details:

This is because of your default route which is assigning all the packets
to go through the ISP1.


>=20
>  		   ISP1     ISP2
>  		    |	     |
>  		    |        |
> 212.XX.XX.117	vr0 |        |vr1 193.1XX.XXX.162
>  		------------------
>  	        |  BSD GATEWAY   |
>  		------------------
>  			| fxp0 169.254.0.1
>  			|
>  		-------- --------
>  		|   |   |   |   |  LAN 169.254.0.0/24
>=20
> *default route on BSD Gateway is thru ISP1.
>=20
> NATD Processes Running:
> ----------------------
>=20
> /sbin/natd -f /etc/natd.cf -n vr0
> /sbin/natd -f /etc/natd2.cf -n vr1
>=20
> natd.cf:
> -------
> log             yes
> deny_incoming   no
> use_sockets     yes
> same_ports      yes
> verbose         no
> port            8668
> interface       fxp0
> unregistered_only     no
>=20
>=20
> natd2.cf:
> --------
> log             yes
> deny_incoming   no
> use_sockets     yes
> same_ports      yes
> verbose         no
> port            8669
> interface       fxp0
> unregistered_only     no
>=20
> natd configuration in firewall:
> ------------------------------
> /sbin/ipfw add 43 divert 8669 all from 169.254.0.18 to any via vr1
> /sbin/ipfw add 46 divert 8668 all from any to any via vr0
>=20
>=20
> Joseph.
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to=20
> "freebsd-questions-unsubscribe@freebsd.org"
>=20
>=20

--
Chris Haulmark
System Admin. Freelancer
"In market for IT corrections for a salary."