From owner-freebsd-net@FreeBSD.ORG Wed Jun 21 06:32:48 2006 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 62F9316A47A for ; Wed, 21 Jun 2006 06:32:48 +0000 (UTC) (envelope-from gurdiga@gmail.com) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.171]) by mx1.FreeBSD.org (Postfix) with ESMTP id C567943D45 for ; Wed, 21 Jun 2006 06:32:47 +0000 (GMT) (envelope-from gurdiga@gmail.com) Received: by ug-out-1314.google.com with SMTP id m3so1680061uge for ; Tue, 20 Jun 2006 23:32:46 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=FoHOIknjbdPL4Qq9Xa4PAO8TT4qJBS95Qt2jxeL1tPX56fH/p4KhJ33zBfqGSCSPeaXaLSzEM9mFxxfYlifQhXn2hlPvO7NtvJrSnhP6/L9yyd9tZp03OfH2NDf4WLyvrcP3N5M7roVD0zuTNY2cmEbPIs3cPc+NvWwBMS7ZoAs= Received: by 10.78.42.7 with SMTP id p7mr3159363hup; Tue, 20 Jun 2006 23:25:38 -0700 (PDT) Received: by 10.78.12.10 with HTTP; Tue, 20 Jun 2006 23:25:38 -0700 (PDT) Message-ID: Date: Wed, 21 Jun 2006 09:25:38 +0300 From: "Vlad GURDIGA" To: freebsd-net@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Subject: nat question X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Jun 2006 06:32:48 -0000 Hello, I could not figureout the answer to a question. Here is the situation: PC A: Windows XP Pro. PC B: FreeBSD 6.1, connected to internet, acting as a gateway for PC A, with NAT (built by hanbook instructions http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-natd.html), open firewall, no restrictions. For long time I have used the PC A with PC B as gateway and everything worked just fine, but now PC A can only ping any host (by IP) in Internet. No other traffic (DNS queries, FTP or HTTP) does not reach the Internet comming back with TTL exceeded response apparently from de destination host (I've seen this on PC B with Ethereal). Question: Is there any way my ISP can 'see' and cut out NATted traffic from PC A letting only the traffic from PC B pass?! How?!