RE: NATD server problem on 5.3 ?

From: Ed Stover (estover_at_nativenerds.com)
Date: 04/20/05

  • Next message: Brian M. Kincaid: "Re: msdosfs fat32 disk size limit in FreeBSD?"
    To: bob@a1poweruser.com
    Date: Tue, 19 Apr 2005 16:02:07 -0600
    
    

    And I would like to add these questions to
    On Tue, 2005-04-19 at 07:44 -0400, bob@a1poweruser.com wrote:
    > Saying it's not working is way to vague.
    > You need to post more details about what is not working.
    > Like can the 5.3 server ping the public internet?
    > Can it ping PCs on the LAN?
    > Can a win LAN PC ping the server?
    > What does the firewall log contain?
    Does nat start up? do a ps -ax |grep nat
    Are you sure your natd.conf is correctly formatted?
    > Have you tested with firewall out of the way by having only single
    > rule to pass all packets?
    > /sbin/ipfw -f flush
    > /sbin/ipfw add allow all from any to any
    Generally if it is your first firewall try the rc.conf option of
    firewall_type="OPEN"
    and here is what my /etc/natd.cf looks like.
    ##/etc/natd.cf
    log yes
    deny_incoming no
    use_sockets yes
    same_ports yes
    verbose no
    port 8668
    interface ep0
    unregistered_only yes
    ##EOF
    >
    >
    >
    > -----Original Message-----
    > From: owner-freebsd-questions@freebsd.org
    > [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of faisal
    > gillani
    > Sent: Tuesday, April 19, 2005 4:08 AM
    > To: freebsd-questions@freebsd.org
    > Subject: NATD server problem on 5.3 ?
    >
    >
    > Well i recently installed my first natd server on
    > freebsd 5.3, but its not working ?
    >
    > here is wat i did ..
    >
    > 1. compiles kernal with the following options
    >
    > options IPFIREWALL
    > options IPV6FIREWALL
    > options IPDIVERT
    >
    > 2. made the following entries in rc.conf
    >
    > defaultrouter="10.0.0.1"
    > gateway_enable="YES"
    > hostname="natserver"
    > ifconfig_fxp0="inet 192.168.0.1 netmask
    > 255.255.255.0"
    > ifconfig_xl0="inet 10.0.0.5 netmask 255.255.255.0"
    > firewall_enable="yes"
    > natd_enable="yes"
    > natd_interface="xl0"
    > natd_flags="-f /etc/natd.conf"
    >
    > 3. made the following entries in rc.firewall
    >
    >
    > /sbin/ipfw -f flush
    > /sbin/ipfw add allow all from any to any via fxp0
    > /sbin/ipfw add allow icmp from any to any out via xl0
    > /sbin/ipfw add allow all from any to any via lo0
    > /sbin/ipfw add divert natd ip from any to any via xl0
    > /sbin/ipfw add allow ip from any to 10.0.0.5 in recv
    > xl0
    > /sbin/ipfw add allow ip from 10.0.0.5 to any out xmit
    > xl0
    >
    > 4. configure the windows clients as follows
    >
    > ipaddress = 192.168.0.3
    > subnet = 255.255.255.0
    > gateway = 192.168.0.1
    > dns server = 192.168.0.2 "dns server capable of
    > resolving internet & local address"
    >
    > this is all that i have done but still interet is not
    > working on clients , what should i do now ?
    >
    >
    >
    >
    > *:$., 88,.$:*(((*$ Allah-hu-Akber*:$., 88,.$:*((*$
    > God is the Greatest
    >
    >
    >
    >
    > __________________________________
    > Do you Yahoo!?
    > Make Yahoo! your home page
    > http://www.yahoo.com/r/hs
    > _______________________________________________
    > freebsd-questions@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    > To unsubscribe, send any mail to
    > "freebsd-questions-unsubscribe@freebsd.org"
    >
    > _______________________________________________
    > freebsd-questions@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"

    _______________________________________________
    freebsd-questions@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"


  • Next message: Brian M. Kincaid: "Re: msdosfs fat32 disk size limit in FreeBSD?"

    Relevant Pages

    • Re: [opensuse] Two NICs, one connected, Ping Both...?
      ... Server is behind a Router, and the Router is doing Port Forwarding. ... Only one of these RJ45 Ports is connected, but I can Ping them both. ... Not counting completely broken firewall rules. ... Start by turning off the firewall, double-checking that you are running ssh, and connecting from a localhost. ...
      (SuSE)
    • Re[4]: What can make DNS lookups slow?
      ... area network which is DNAT served through the server by iptables set ... AO> good since its the "2.0" network ... AO> i assume your gateway 217.34.100.198 can ping the above 2 ip# ... the firewall machine or the dmz server but I ...
      (Debian-User)
    • Re: loss of SOME connectivity
      ... The only issue is that the server cannot send/receive email, ... I cannot ping microsoft's IP address. ... Linksys firewall in place. ... I can VNC in AND out. ...
      (microsoft.public.windows.server.sbs)
    • Re: [opensuse] Two NICs, one connected, Ping Both...?
      ... Two NIC's, one connected, Ping Both...? ... Server is behind a Router, and the Router is doing Port Forwarding. ... Not counting completely broken firewall rules. ... and connecting from a localhost. ...
      (SuSE)
    • Re: firewalling, imap, DMZs etc.
      ... What comes to mind right off the bat, would be VPN into your network while you are away to acess your files/mail. ... You can then keep your box as a firewall, router, VPN, DHCP, DNSmasq and keep it simple and secure. ... my server inside the LAN? ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
      (Debian-User)

    Loading