Date: Tue, 30 Nov 1999 23:02:44 -0800 From: "nat" <nat@unixlover.com> To: <freebsd-questions@freebsd.org> Subject: natd not working properly.. firewall help Message-ID: <000c01bf3bca$123a33a0$3898b2d1@vedika>
next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.
------=_NextPart_000_0009_01BF3B87.02AED820
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
I have set up natd by the manual. I have a cable modem and two
nics. what i am trying to do is share the internet with other users
on my LAN. The cable modem is currently setup on device de1
properly and works for the "local" user.
Now, throgh the clients I can only contact the network card (de1)
that the cable modem is connected to. I cannot contact the outside
network.
The de0 interface is the one on the internal network and is set to
192.168.0.1. All of the clients have this as the default router.
these are my firewall settings (please tell me which ones are wrong):
#Flush out the list before we begin.
$fwcmd -f flush
# divert
$fwcmd add 1 divert natd from any to any via de0
# allow by default
$fwcmd add 65000 allow all from any to any
# 50-99: trusted hosts =20
$fwcmd add 50 allow ip from any to 207.171.202.198:255.255.255.224
$fwcmd add 51 allow ip from 207.171.202.198:255.255.255.224 to any
$fwcmd add 52 allow ip from 24.1.183.147 to any
$fwcmd add 53 allow ip from any to 24.1.183.147
=20
# 1000-1999: DoS/hack prevention
$fwcmd add 1000 deny tcp from any to any 1080
$fwcmd add 1001 deny tcp from any to any 12345
$fwcmd add 1002 deny tcp from any to any 31337
$fwcmd add 1003 deny tcp from any to any 111
$fwcmd add 1004 deny tcp from any to any 87
$fwcmd add 1005 deny tcp from any to any 2049
$fwcmd add 1006 deny tcp from any to any 512
$fwcmd add 1007 deny tcp from any to any 513
$fwcmd add 1008 deny tcp from any to any 514
$fwcmd add 1009 deny tcp from any to any 515
$fwcmd add 1010 deny tcp from any to any 540
*this is in the /etc/rc.firewall file.
This is what i have set up for rc.conf:
firewall_enable=3D"YES"
natd_enable=3D"YES" =20
natd_interface=3D"de0"
named_enable=3D"YES" =20
gateway_enable=3D"YES"
I think that is how you set it up.=20
There is also one last strange thing that I think might be the problem.
Right before it prints out gateway=3Dyes it says tcpextensions=3Dno.
Im not sure what that means either.
I am using the Cox@home network so please help me if you can.
Thank you,
nat
------=_NextPart_000_0009_01BF3B87.02AED820
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.2722.2800" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT size=3D2>I have set up natd by the manual. I have a cable =
modem and=20
two</FONT></DIV>
<DIV><FONT size=3D2>nics. what i am trying to do is share the internet =
with other=20
users</FONT></DIV>
<DIV><FONT size=3D2>on my LAN. The cable modem is currently setup on =
device=20
de1</FONT></DIV>
<DIV><FONT size=3D2>properly and works for the "local" =
user.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT size=3D2>Now, throgh the clients I can only contact the =
network card=20
(de1)</FONT></DIV>
<DIV><FONT size=3D2>that the cable modem is connected to. I cannot =
contact the=20
outside</FONT></DIV>
<DIV><FONT size=3D2>network.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT size=3D2>The de0 interface is the one on the internal network =
and is=20
set to</FONT></DIV>
<DIV><FONT size=3D2>192.168.0.1. All of the clients have this as the =
default=20
router.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT size=3D2>these are my firewall settings (please tell me which =
ones are=20
wrong):</FONT></DIV>
<DIV><FONT size=3D2>#Flush out the list before we begin.<BR>$fwcmd -f=20
flush</FONT></DIV>
<DIV> </DIV>
<DIV><FONT size=3D2># divert<BR>$fwcmd add 1 divert natd from any to any =
via=20
de0</FONT></DIV>
<DIV> </DIV>
<DIV><FONT size=3D2># allow by default<BR>$fwcmd add 65000 allow all =
from any to=20
any</FONT></DIV>
<DIV> </DIV>
<DIV><FONT size=3D2># 50-99: trusted hosts <BR>$fwcmd add 50 =
allow ip=20
from any to 207.171.202.198:255.255.255.224<BR>$fwcmd add 51 allow ip =
from=20
207.171.202.198:255.255.255.224 to any<BR>$fwcmd add 52 allow ip from=20
24.1.183.147 to any<BR>$fwcmd add 53 allow ip from any to=20
24.1.183.147<BR> <BR># =
1000-1999:=20
DoS/hack prevention<BR>$fwcmd add 1000 deny tcp from any to any =
1080<BR>$fwcmd=20
add 1001 deny tcp from any to any 12345<BR>$fwcmd add 1002 deny tcp from =
any to=20
any 31337<BR>$fwcmd add 1003 deny tcp from any to any 111<BR>$fwcmd add =
1004=20
deny tcp from any to any 87<BR>$fwcmd add 1005 deny tcp from any to any=20
2049<BR>$fwcmd add 1006 deny tcp from any to any 512<BR>$fwcmd add 1007 =
deny tcp=20
from any to any 513<BR>$fwcmd add 1008 deny tcp from any to any =
514<BR>$fwcmd=20
add 1009 deny tcp from any to any 515<BR>$fwcmd add 1010 deny tcp from =
any to=20
any 540</FONT></DIV>
<DIV><FONT size=3D2></FONT> </DIV>
<DIV><FONT size=3D2>*this is in the /etc/rc.firewall file.</FONT></DIV>
<DIV><FONT size=3D2></FONT> </DIV>
<DIV><FONT size=3D2>This is what i have set up for rc.conf:</FONT></DIV>
<DIV><FONT =
size=3D2>firewall_enable=3D"YES"<BR>natd_enable=3D"YES" =20
<BR>natd_interface=3D"de0"<BR>named_enable=3D"YES" =20
<BR>gateway_enable=3D"YES"<BR></DIV></FONT>
<DIV><FONT size=3D2></FONT> </DIV>
<DIV><FONT size=3D2>I think that is how you set it up. </FONT></DIV>
<DIV><FONT size=3D2></FONT> </DIV>
<DIV><FONT size=3D2>There is also one last strange thing that I think =
might be the=20
problem.</FONT></DIV>
<DIV><FONT size=3D2>Right before it prints out gateway=3Dyes it says=20
tcpextensions=3Dno.</FONT></DIV>
<DIV><FONT size=3D2>Im not sure what that means either.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT size=3D2>I am using the Cox@home network</FONT><FONT =
size=3D2> so please=20
help me if you can.</FONT></DIV>
<DIV><FONT size=3D2></FONT> </DIV>
<DIV><FONT size=3D2>Thank you,</FONT></DIV>
<DIV><FONT size=3D2></FONT> </DIV>
<DIV><FONT size=3D2>nat</DIV></FONT></BODY></HTML>
------=_NextPart_000_0009_01BF3B87.02AED820--
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000c01bf3bca$123a33a0$3898b2d1>