From owner-freebsd-questions Mon Sep 13 11:22: 3 1999 Delivered-To: freebsd-questions@freebsd.org Received: from aag.alaskaair.com (outbound.alaskaair.com [159.49.42.191]) by hub.freebsd.org (Postfix) with SMTP id 798131568C for ; Mon, 13 Sep 1999 11:21:46 -0700 (PDT) (envelope-from elazich@AlaskaAir.com) Received: from OUTBOUND.alaskaair.com by aag.alaskaair.com via smtpd (for hub.FreeBSD.org [204.216.27.18]) with SMTP; 13 Sep 1999 18:24:58 UT Received: from asnasta (asnasta.alaskaair.com [159.49.42.21]) by outbound.alaskaair.com (8.9.3/8.9.3) with SMTP id LAA28434; Mon, 13 Sep 1999 11:13:10 -0700 From: elazich@AlaskaAir.com To: ru@ucb.crimea.ua Cc: freebsd-questions@FreeBSD.ORG Date: Mon, 13 Sep 1999 11:11:45 -0700 Subject: Re: IPFW & NATD Message-ID: References: <19990913210504.D88685@relay.ucb.crimea.ua> Organization: Alaska Airlines MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit Content-ID: X-Gateway: NASTA Gate 2.0 for FirstClass(R) Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Here is a copy of netstat -rn output, thanks for your help. >capricorn# netstat -rn >Routing tables >Internet: >Destination Gateway Flags Refs Use Netif >Expire >default 207.149.134.129 UGSc 48 65116 lnc1 >10/24 link#1 UC 0 0 vx0 >10.0.0.1 0:a0:24:bd:f8:af UHLW 0 10 lo0 >10.0.0.3 0:0:1b:4a:9e:35 UHLS 0 28 vx0 >10.0.0.4 0:0:c:3e:1f:d1 UHLW 0 18 vx0 >1106 >127.0.0.1 127.0.0.1 UH 0 24 lo0 >207.149.134.128/27 link#2 UC 0 0 lnc1 >207.149.134.129 0:0:c:6a:78:c UHLW 47 0 lnc1 > 587 >207.149.134.143 0:80:29:68:52:c4 UHLW 1 467 lo0 >capricorn# Eli ru@ucb.crimea.ua writes: >On Mon, Sep 13, 1999 at 10:01:40AM -0700, elazich@AlaskaAir.com wrote: >> I have a FBSD box with 2 NICs (vx0 and lnc1) which I am running ipfw >> and natd on. vx0 is on my internal net using a 10 block address and >> lnc1 is on my external connection. I had compiled in support for IPFW >> in the kernel and run natd -interface lnc1. My IPFW rules look like >> this, >> >> capricorn# ipfw -a l >> 00100 82838 9639926 divert 8668 ip from any to any via lnc1 >> 00200 84517 9917180 allow ip from any to any >> 65535 16 1696 deny ip from any to any >> capricorn# >> >> Output of ifconfig -a is; >> >> capricorn# ifconfig -a >> vx0: flags=8843 mtu 1500 >> inet 10.0.0.1 netmask 0xffffff00 broadcast 10.0.0.255 >> ether 00:a0:24:bd:f8:af >> >netmask on this interface is set for Class C network. Is this >intentional? >> lnc1: flags=8843 mtu 1500 >> inet 207.149.134.143 netmask 0xffffffe0 broadcast >> 207.149.134.159 >> ether 00:80:29:68:52:c4 >> lp0: flags=8810 mtu 1500 >> tun0: flags=8010 mtu 1500 >> sl0: flags=c010 mtu 552 >> ppp0: flags=8010 mtu 1500 >> lo0: flags=8049 mtu 16384 >> inet 127.0.0.1 netmask 0xff000000 >> capricorn# >> >> I run natd -interface lnc1, this was all working fine for quite some >> time but now I cannot seem to even ping anything on my loal network >> from the firewall box. Any other machine on my 10 net can talk to >each >> other (but they cannot reach the firewall), and what's even starnger >is >> that when I run tcpdump on my firewall it picks up traffic on the 10 >> network. Does anyone know what is going on here and how I can get >> myself back to functional status? >> >What does `netstat -rn' produce? >-- >Ruslan Ermilov Sysadmin and DBA of the >ru@ucb.crimea.ua United Commercial Bank, >ru@FreeBSD.org FreeBSD committer, >+380.652.247.647 Simferopol, Ukraine >http://www.FreeBSD.org The Power To Serve >http://www.oracle.com Enabling The Information Age >Received: from aag.alaskaair.com (aag.alaskaair.com [159.49.42.2]) by >asnasta.alaskaair.com with SMTP id MSGIETZJ; Mon, 13 Sep 1999 18:09:51 >GMT >Received: from relay.ucb.crimea.UA ([212.110.138.1]) by >aag.alaskaair.com via smtpd (for asnasta.alaskaair.com [159.49.42.21]) >with SMTP; 13 Sep 1999 18:08:59 UT >Received: (from ru@localhost) by relay.ucb.crimea.ua (8.9.3/8.9.3/UCB) >id VAA95177; Mon, 13 Sep 1999 21:05:04 +0300 (EEST) (envelope-from ru) >Message-ID: <19990913210504.D88685@relay.ucb.crimea.ua> >References: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message