From owner-freebsd-questions Tue Nov 30 23: 4:22 1999 Delivered-To: freebsd-questions@freebsd.org Received: from hpamraaa.compuserve.com (ah-img-rel-1.compuserve.com [149.174.217.152]) by hub.freebsd.org (Postfix) with ESMTP id 3CC1514E98 for ; Tue, 30 Nov 1999 23:04:13 -0800 (PST) (envelope-from nat@unixlover.com) Received: (from mailgate@localhost) by hpamraaa.compuserve.com (8.8.8/8.8.8/HP-REL-1.2) id CAA09317 for freebsd-questions@freebsd.org; Wed, 1 Dec 1999 02:04:12 -0500 (EST) Received: from vedika (pool0056.cvx5-bradley.dialup.earthlink.net [209.178.152.56]) by hpamraaa.compuserve.com (8.8.8/8.8.8/HP-REL-1.2) with SMTP id CAA09307 for ; Wed, 1 Dec 1999 02:04:09 -0500 (EST) Message-ID: <000c01bf3bca$123a33a0$3898b2d1@vedika> From: "nat" To: Subject: natd not working properly.. firewall help Date: Tue, 30 Nov 1999 23:02:44 -0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0009_01BF3B87.02AED820" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2314.1300 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG This is a multi-part message in MIME format. ------=_NextPart_000_0009_01BF3B87.02AED820 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I have set up natd by the manual. I have a cable modem and two nics. what i am trying to do is share the internet with other users on my LAN. The cable modem is currently setup on device de1 properly and works for the "local" user. Now, throgh the clients I can only contact the network card (de1) that the cable modem is connected to. I cannot contact the outside network. The de0 interface is the one on the internal network and is set to 192.168.0.1. All of the clients have this as the default router. these are my firewall settings (please tell me which ones are wrong): #Flush out the list before we begin. $fwcmd -f flush # divert $fwcmd add 1 divert natd from any to any via de0 # allow by default $fwcmd add 65000 allow all from any to any # 50-99: trusted hosts =20 $fwcmd add 50 allow ip from any to 207.171.202.198:255.255.255.224 $fwcmd add 51 allow ip from 207.171.202.198:255.255.255.224 to any $fwcmd add 52 allow ip from 24.1.183.147 to any $fwcmd add 53 allow ip from any to 24.1.183.147 =20 # 1000-1999: DoS/hack prevention $fwcmd add 1000 deny tcp from any to any 1080 $fwcmd add 1001 deny tcp from any to any 12345 $fwcmd add 1002 deny tcp from any to any 31337 $fwcmd add 1003 deny tcp from any to any 111 $fwcmd add 1004 deny tcp from any to any 87 $fwcmd add 1005 deny tcp from any to any 2049 $fwcmd add 1006 deny tcp from any to any 512 $fwcmd add 1007 deny tcp from any to any 513 $fwcmd add 1008 deny tcp from any to any 514 $fwcmd add 1009 deny tcp from any to any 515 $fwcmd add 1010 deny tcp from any to any 540 *this is in the /etc/rc.firewall file. This is what i have set up for rc.conf: firewall_enable=3D"YES" natd_enable=3D"YES" =20 natd_interface=3D"de0" named_enable=3D"YES" =20 gateway_enable=3D"YES" I think that is how you set it up.=20 There is also one last strange thing that I think might be the problem. Right before it prints out gateway=3Dyes it says tcpextensions=3Dno. Im not sure what that means either. I am using the Cox@home network so please help me if you can. Thank you, nat ------=_NextPart_000_0009_01BF3B87.02AED820 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

I have set up natd by the manual. I have a cable = modem and=20 two

nics. what i am trying to do is share the internet = with other=20 users

on my LAN. The cable modem is currently setup on = device=20 de1

properly and works for the "local" = user.

Now, throgh the clients I can only contact the = network card=20 (de1)

that the cable modem is connected to. I cannot = contact the=20 outside

network.

The de0 interface is the one on the internal network = and is=20 set to

192.168.0.1. All of the clients have this as the = default=20 router.

these are my firewall settings (please tell me which = ones are=20 wrong):

#Flush out the list before we begin.
$fwcmd -f=20 flush

# divert
$fwcmd add 1 divert natd from any to any = via=20 de0

# allow by default
$fwcmd add 65000 allow all = from any to=20 any

# 50-99: trusted hosts
$fwcmd add 50 = allow ip=20 from any to 207.171.202.198:255.255.255.224
$fwcmd add 51 allow ip = from=20 207.171.202.198:255.255.255.224 to any
$fwcmd add 52 allow ip from=20 24.1.183.147 to any
$fwcmd add 53 allow ip from any to=20 24.1.183.147

# = 1000-1999:=20 DoS/hack prevention
$fwcmd add 1000 deny tcp from any to any = 1080
$fwcmd=20 add 1001 deny tcp from any to any 12345
$fwcmd add 1002 deny tcp from = any to=20 any 31337
$fwcmd add 1003 deny tcp from any to any 111
$fwcmd add = 1004=20 deny tcp from any to any 87
$fwcmd add 1005 deny tcp from any to any=20 2049
$fwcmd add 1006 deny tcp from any to any 512
$fwcmd add 1007 = deny tcp=20 from any to any 513
$fwcmd add 1008 deny tcp from any to any = 514
$fwcmd=20 add 1009 deny tcp from any to any 515
$fwcmd add 1010 deny tcp from = any to=20 any 540

*this is in the /etc/rc.firewall file.

This is what i have set up for rc.conf:

firewall_enable=3D"YES"
natd_enable=3D"YES" =20
natd_interface=3D"de0"
named_enable=3D"YES" =20
gateway_enable=3D"YES"

I think that is how you set it up.

There is also one last strange thing that I think = might be the=20 problem.

Right before it prints out gateway=3Dyes it says=20 tcpextensions=3Dno.

Im not sure what that means either.

I am using the Cox@home network so please=20 help me if you can.

Thank you,

nat

------=_NextPart_000_0009_01BF3B87.02AED820-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message