Date: Wed, 23 Feb 2000 08:40:50 +0200 From: Giorgos Keramidas <keramida@ceid.upatras.gr> To: Sabre <sabre@sabresdomain.com> Cc: FreeBSD Question List <freebsd-questions@FreeBSD.ORG> Subject: Re: Quick IPFW rule help... Message-ID: <20000223084050.A683@hades.hell.gr> In-Reply-To: <Pine.BSF.4.21.0002212215050.3274-100000@sabre1.sabresdomain.com>; from sabre@sabresdomain.com on Mon, Feb 21, 2000 at 10:18:22PM %2B0000 References: <20000218153825.A6630@hades.hell.gr> <Pine.BSF.4.21.0002212215050.3274-100000@sabre1.sabresdomain.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Feb 21, 2000 at 10:18:22PM +0000, Sabre wrote:
> Still didn't help :/ This is really fustrating! Here are the rules that
> I am using for this:
> $fwcmd add pass udp from any to any 17590-17599 in recv ${oif}
> $fwcmd add pass udp from any 17590-17599 to any out xmit ${oif}
> $fwcmd add pass all from any to any out xmit ${oif}
> $fwcmd add pass all from any to any via ${iif}
> $fwcmd add pass tcp from any to any in recv ${oif} established
>
> where oif=outside interface and iif=inside interface.
You do have forwarding enabled between your interfaces, don't you?
You can see if this is enabled, with
% sysctlnet.inet.ip.forwarding
net.inet.ip.forwarding: 0
If this is zero, as in my machine which has one interface only, you can
enable it termporarily with:
% sysctl -w net.inet.ip.forwarding=1
and, to have it enabled each time you reboot, set in your rc.conf the
following variable:
gateway_enable=YES
--
Giorgos Keramidas, < keramida @ ceid . upatras . gr >
For my public PGP key: finger keramida@diogenis.ceid.upatras.gr
PGP fingerprint, phone and address in the headers of this message.
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000223084050.A683>