From owner-freebsd-questions@FreeBSD.ORG Mon Feb 27 15:12:35 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 37CC816A420 for ; Mon, 27 Feb 2006 15:12:35 +0000 (GMT) (envelope-from mefystofel@gmail.com) Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.195]) by mx1.FreeBSD.org (Postfix) with ESMTP id BBE5943D48 for ; Mon, 27 Feb 2006 15:12:34 +0000 (GMT) (envelope-from mefystofel@gmail.com) Received: by wproxy.gmail.com with SMTP id 71so189688wra for ; Mon, 27 Feb 2006 07:12:34 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=UIPmAsJH2RPL4JqKr3wxWd4sLObqopyVSTeoDCJ6atkDUsrdJ59NUOCT1kOtOj/3EMiBmAjjHqi+y60rxlMxs/mu0r7+lzG7SEIm7D+LymNrGssubfCQ78qJv4BYIJ4Y5z583viVyHo8sovVcL/aX6a6u7FlxQI//NFUkUDwCYk= Received: by 10.54.101.11 with SMTP id y11mr4109513wrb; Mon, 27 Feb 2006 07:12:13 -0800 (PST) Received: by 10.54.93.14 with HTTP; Mon, 27 Feb 2006 07:12:33 -0800 (PST) Message-ID: Date: Mon, 27 Feb 2006 20:12:33 +0500 From: "Roman Serbski" To: freebsd-questions@freebsd.org In-Reply-To: <20060227145704.GA38009@flame.pc> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: <4402232A.8010908@locolomo.org> <20060227145011.GA37745@flame.pc> <20060227145704.GA38009@flame.pc> Subject: Re: Help with IP Filter 4.1.8 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Feb 2006 15:12:35 -0000 On 2/27/06, Giorgos Keramidas wrote: > One reason why this could fail is that the xl0 interface is not part of > the route to your ISP's DNS servers. > > How many interfaces does the system have? Is xl0 in the path to your > ISP's router? There are two interfaces - xl0 and xl1 with no cable connected to xl1. gateway_enable is not defined in rc.conf so is off. I can successfully access ISP's DNS both if I disable ipf or configure ifp to 'pass in all'.