Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 9 Oct 2007 00:27:42 +0200
From:      Paolo Pisati <piso@freebsd.org>
To:        Randy Bush <randy@psg.com>
Cc:        FreeBSD Net <freebsd-net@freebsd.org>, "Andrey V. Elsukov" <bu7cher@yandex.ru>, Paolo Pisati <piso@freebsd.org>
Subject:   Re: ipfw nat befuddlement
Message-ID:  <20071008222742.GC10716@tin.it>
In-Reply-To: <470A107C.9000509@psg.com>
References:  <4708D2EE.4010405@psg.com> <4709D44E.5050305@psg.com> <4709D647.1050803@yandex.ru> <20071008082256.GA9098@tin.it> <470A107C.9000509@psg.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Oct 08, 2007 at 08:11:56PM +0900, Randy Bush wrote:
> > or substisute natd_enable/natd_interface in rc.conf with:
> > firewall_nat_enable="yes"
> > firewall_nat_interface="$IF"
> 
> aha!  that stuff is not in /etc/defaults/rc.conf

ops... forgot to commit it... :P
 
> extracted from /etc/rc.conf
> 
> ifconfig_vr0=DHCP
> ifconfig_ath0="192.168.0.1 channel 4 ssid foo mediaopt hostap up"
> gateway_enable=YES
> 
> # grep nat /etc/ipfw.rules
> nat 42 config if vr0 log
> add nat 42 ip4 from any to any via vr0
> 
> # sysctl net.inet.ip.fw.one_pass
> net.inet.ip.fw.one_pass: 0
> 
> system boots and vr0 gets a dhcp address successfully
> 
> dhcpd is running
> 
> wireless client successfully associates with ath0, but can not get dhcp
> address

is your ruleset/config ok? can you post it?
try to substitute the "nat 42 ip4 from any to any via vr0" rule with a 
divert rule, and config & start natd: does it config work as expected?

bye,
P.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20071008222742.GC10716>