Date: Mon, 15 Apr 2002 19:59:12 -0700 From: "Drew Tomlinson" <drew@mykitchentable.net> To: <questions@freebsd.org> Subject: Re: Can't Get Gateway To Forward Packets -- SOLVED!!! Message-ID: <005301c1e4f2$b0132db0$0301a8c0@bigdaddy>
next in thread | raw e-mail | index | archive | help
I almost sent the note below but by typing every step as I did it, it
made me think out each step in a logical manner. I finally figured
out that my gateway *WAS* passing packets but my 3Com router was not
returning them. Adding a route to 192.168.1.0 using 192.168.10.2 as a
gateway on the 3Com solved the problem. I've included the note below
in the hope that it might help someone else troubleshoot a similar
problem in the future.
Drew
-------------------------------------
I'm continuing my attempt to resolve the problem I'm having with my
FBSD gateway. I'm using ipfw to log my traffic and see if I can
determine anything. I'd appreciate *any* comments even if they're
only to say that my methods are sound and my findings/conclusions are
correct. I'm *REALLY* stuck here and could use the help. :)
Here's my network config:
ISP
|
| Public DHCP address
|
3Com ADSL Modem/Router
(Router performs NAT)
| (192.168.10.1)
|
|
| (ed1 192.168.10.2)
FBSD Gateway
| (ed0 192.168.1.2)
|
|
Internal LAN
|
|
| 192.168.1.3
Win 2K Box I am testing from.
FBSD Gateway network config and routes:
blacksheep# ifconfig
lp0: flags=8810<POINTOPOINT,SIMPLEX,MULTICAST> mtu 1500
ed0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.1.2 netmask 0xffffff00 broadcast 192.168.1.255
ether 00:40:05:66:b2:55
ed1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.10.2 netmask 0xffffff00 broadcast 192.168.10.255
ether 00:40:05:66:b2:52
ppp0: flags=8010<POINTOPOINT,MULTICAST> mtu 1500
sl0: flags=c010<POINTOPOINT,LINK2,MULTICAST> mtu 552
faith0: flags=8002<BROADCAST,MULTICAST> mtu 1500
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet 127.0.0.1 netmask 0xff000000
blacksheep# netstat -rn
Routing tables
Internet:
Destination Gateway Flags Refs Use Netif
Expire
default 192.168.10.1 UGSc 2 7440 ed1
127.0.0.1 127.0.0.1 UH 3 27420 lo0
192.168.1 link#2 UC 3 0 ed0
192.168.1.2 0:40:5:66:b2:55 UHLW 0 2 lo0
192.168.1.3 0:a0:cc:5d:c3:70 UHLW 4 3864 ed0
1169
192.168.10 link#3 UC 2 0 ed1
192.168.10.1 0:c0:49:27:b2:b UHLW 4 1111 ed1
1111
192.168.10.2 0:40:5:66:b2:52 UHLW 0 68 lo0
Win 2K network config:
IP Address. . . . . . . . . . . . : 192.168.1.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.2
Active Routes:
Network Destination Netmask Gateway Interface
Metric
0.0.0.0 0.0.0.0 192.168.1.2 192.168.1.3
1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1
1
192.168.1.0 255.255.255.0 192.168.1.3 192.168.1.3
1
192.168.1.3 255.255.255.255 127.0.0.1 127.0.0.1
1
192.168.1.255 255.255.255.255 192.168.1.3 192.168.1.3
1
224.0.0.0 224.0.0.0 192.168.1.3 192.168.1.3
1
255.255.255.255 255.255.255.255 192.168.1.3 192.168.1.3
1
Default Gateway: 192.168.1.2
For review from my previous message, here's what I know. The gateway
can access the Internet. Machines on the internal LAN can ping ed0
(1.2) and ed1 (10.2). However they can not ping the 3Com (10.1) and
thus, can not access the Internet. So I conclude that packets are not
being passed from ed0 to ed1 on the gateway, correct?
I set the following log options from ipfw on the gateway. My attempt
is to see where the packets are being lost. My goal here is to see
all ICMP traffic. Here's the rule:
blacksheep# ipfw show
00100 140 10800 allow log icmp from any to any
65535 146722 45418124 allow ip from any to any
Is this correct?
Now with these rules in place, I monitor /var/log/security while I
attempt to ping. I try to ping 192.168.10.1 from the Win 2K box. I
get these entries in the ipfw log:
Apr 15 19:40:31 blacksheep /kernel: ipfw: 100 Accept ICMP:8.0
192.168.1.3 192.168.10.1 in via ed0
Apr 15 19:40:31 blacksheep /kernel: ipfw: 100 Accept ICMP:8.0
192.168.1.3 192.168.10.1 out via ed1
So I conclude that packets *ARE* passing through the gateway but I
don't understand why they aren't coming in. I'm stuck and don't know
what else to try.
Even comments confirming my finding, methods, etc. would at least let
me know that I'm not missing something obvious. Like I said in my
first note, I used to have this working until the machine locked up a
few times and I couldn't shutdown properly causing me to suspect a
corrupt file. But I've rebuilt my world and kernel. Shouldn't this
remove the possibility of corrupt files? If not, I will rebuild from
scratch but don't want to do that unless it's my last possibility.
Thanks for any comments,
Drew
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?005301c1e4f2$b0132db0$0301a8c0>