From owner-freebsd-security Sat Sep 8 19:55:24 2001 Delivered-To: freebsd-security@freebsd.org Received: from smtp02.mrf.mail.rcn.net (smtp02.mrf.mail.rcn.net [207.172.4.61]) by hub.freebsd.org (Postfix) with ESMTP id 37BA937B407 for ; Sat, 8 Sep 2001 19:55:20 -0700 (PDT) Received: from 209-122-223-52.s2250.apx1.nyw.ny.dialup.rcn.com ([209.122.223.52] helo=confusion) by smtp02.mrf.mail.rcn.net with smtp (Exim 3.33 #10) id 15fukg-0005rV-00 for freebsd-security@freebsd.org; Sat, 08 Sep 2001 22:55:18 -0400 Message-ID: <001401c10822$99f27ac0$34df7ad1@unstable.org> From: "Klik" To: Subject: ipfw + natd woes Date: Sun, 8 Jul 2001 22:55:22 -0400 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0011_01C10801.11C383E0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org This is a multi-part message in MIME format. ------=_NextPart_000_0011_01C10801.11C383E0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello, I'm having trouble setting up my ipfw firewall with a default rule of = deny while using natd.. My setup is as follow: Cablemodem--> nic1--| FreeBSD box |--nic2--> HUB natd flags: -w -s -n nic1 If I remove the 'allow ip from any to any' rule and add bunch of permit = statements for DNS, HTTP, IRC, etc.. The packets will only go to the = FreeBSD machine. None of the machines on the local network are able to = access the outside world. I've read the past threads about ipfw and = natd, the natd and ipfw man pages ...I'm about to pull my hair out Any help would be greatly appreciated Greg ------=_NextPart_000_0011_01C10801.11C383E0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hello,
 
I'm having trouble setting up my ipfw = firewall with=20 a default rule of deny while using natd.. My setup is as = follow:
 
Cablemodem--> nic1--| FreeBSD box = |--nic2-->=20 HUB
 
natd flags:  -w -s -n = nic1
 
If I remove the 'allow ip from any to = any' rule and=20 add bunch of permit statements for DNS, HTTP, IRC, etc..  The = packets=20 will only go to the FreeBSD machine. None of the machines on the local network are able to access the = outside=20 world.  I've read the past threads about ipfw and natd, = the natd=20 and ipfw man pages ...I'm about to pull my hair out
 
Any help would be greatly appreciated
Greg
------=_NextPart_000_0011_01C10801.11C383E0-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message