Date: Thu, 8 Apr 2004 13:34:13 +0200 From: "RazorOnFreeBSD" <yann.luppo@attglobal.net> To: <freebsd-questions@freebsd.org> Subject: Internet 2 Message-ID: <07ab01c41d5d$714d6c80$8215670c@razorwork>
next in thread | raw e-mail | index | archive | help
Hi everyone,
I bring an old post again because I have now more information to give =
this.
My post was this one :
-------------------------------------------------------------------------=
-------------------------------------------------------=20
-------------------------------------------------------------------------=
-------------------------------------------------------
I just setup a freebsd box with the 5.1 release to be a =
gateway/firewall.
The installation was smooth and to setup the gateway/firewall with nat a =
lot of sources are available on Internet.
Here is my problem, I can't connect to Internet from the Freebsd box.
I have DSL and my ISP is AT&T, I have a static IP wich means I don't =
need to run PPP to connect.
FreeBSD Internet NIC is : 12.103.21.x
When I type ifconfig my NIC looks fine, up and running :
rl0 : 12.103.21.x
For information the freebsd box contains 2 NIC's one for Internet the =
other for the LAN (192.168.1.1)
If I ping myself no problem everything's fine, but I can't ping a web =
address. I don't know if it is possible under unix but I use to "ping =
www.yahoo.com" for example to know if it's well connected. But the best =
proof is when I try to install samba my freebsd gives a time out =
reaching the samba server on the web....
I have setup a firewall_type=3D"OPEN" because i'm still testing but I =
also setup natd and gateway variables in the rc.conf file to what is =
needed up to majority of websites about firewall and gateways with =
Freebsd.
I also rebuilt the kernel up to those websites wich was fine, and I =
created a natd.conf file.
One more thing I think I didn't use the Domain variable when I set up =
the NIC from sysinstall.... don't know if it's important!
Well I don't understand why it doesn't work.... The tech guy from at&t =
hotline told me it's easy as setup a LAN.... "yes you're right my LAN =
works fine but not Internet!" :S
Please somebody help me !!!!
-------------------------------------------------------------------------=
-------------------------------------------------------=20
-------------------------------------------------------------------------=
-------------------------------------------------------
And I now have those outputs and conf file to go with :
-------------------------------------------------------------------------=
-------------------------------------------------------=20
-------------------------------------------------------------------------=
-------------------------------------------------------
Here is my "netstat -r" output :
Dest Gateway Flags =
Refs
Use Netif
Razor 12.103.21.1 UGSc 2
105 rl0
12.103.21/24 link#1 UC 1
0 rl0
12.103.21.1 link#1 UHLW 3
2 rl0
localhost localhost UH =
0
0 lo0
192.168.1 link#2 UC 1
0 dc0
kitty.my.domain 00:06:5b:b4:41:1c UHLW 0 0
dc0
------------------------------
ifconfig outputs :
rl0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 12.103.21.x netmask 0xffffff00 broadcast 12.103.21.255
inet6 ...........
ether ...........
media: Ethernet autoselect (100baseTX <full duplex>)
status: Active
dc0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
inet6 ...........
ether ...........
media: Ethernet autoselect (10baseT/UTP)
status: Active
------------------------------
resolv.conf :
domain Razor
nameserver 12.127.16.83 #those two ip's are my current dns server =
under
the windows station... they work.
nameserver 12.127.17.83
------------------------------
hosts :
::1 localhost
localhost.my.domain
127.0.0.1 localhost =
localhost.my.domain
192.168.1.1 Razor.my.domain Razor
192.168.1.15 razor_work.my.domain razor_work
192.168.1.16 Kitty.my.domain Kitty
------------------------------
rc.conf :
defaultrouter=3D"12.103.21.1"
gateway_enable=3D"YES"hostname=3D"Razor"
ifconfig_rl0=3D"inet 12.103.21.x netmask 255.255.255.0"
ifconfig_dc0=3D"inet 192.168.1.1 netmask 255.255.255.0"
inetd_enable=3D"NO"
kern_securelevel=3D"2"
kern_securelevel_enable=3D"NO" # I did that because it was required to =
rebuild
the kernel up to a website
keymap=3D"fr.iso.acc"
linux_enable=3D"YES"
nfs_server_enable=3D"NO"
sendmail_enable=3D"NO"
sshd_enable=3D"NO"
usdb_enable=3D"NO"
firewall_enable=3D"YES"
firewall_type=3D"OPEN"
firewall_quiet=3D"NO"
natd_enable=3D"YES"
natd_interface=3D"rl0"
natd_flags=3D"/etc/fw/natdy.conf"
tcp_drop_synfin=3D"YES"
------------------------------
natdy.conf :
unregistered_only
interface rl0
use_sockets
punch_fw 2000:50
------------------------------
sysctl.conf :
net.inet.tcp.strict_rfc1918=3D1
net.inet.ip.check_interface=3D1
net.inet.tcp.blackhole=3D1
net.inet.udp.blackhole=3D2
Tell me if you need more information ????
(it was a lot of work to copy these, plz help me!)
Thanks.
razor.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?07ab01c41d5d$714d6c80$8215670c>