Re: ipnat and "ping" problem.

Maślanka Wojciech píše v pá 23. 12. 2005 v 23:07 +0100:
> This is my network:
> Internet---------------[rl0, 192.168.0.50_____10.0.0.1
> ,rl1]------------------[10.0.0.2]
> On 10.0.0.2 machine I cant ping any host in internet. I can ping only
> 10.0.0.1 and 192.168.0.50. :(
> Whats wrong??
>
>
>
> [/usr/src]#uname -a
> FreeBSD freebsd.mila10.6 6.0-RELEASE FreeBSD 6.0-RELEASE
>
>
> [/usr/src]#ipfstat -io
> pass out quick all
> pass in quick all
>
>
> [/usr/src]#ipnat -l
> List of active MAP/Redirect filters:
> map rl0 10.0.0.0/24 -> 192.168.0.50/32 proxy port ftp ftp/tcp
> map rl0 10.0.0.0/24 -> 192.168.0.50/32 portmap tcp/udp auto
> map rl0 10.0.0.0/24 -> 192.168.0.50/32
>

You need also
map rl0 10.0.0.0/24 -> 192.168.0.50/32 icmpidmap icmp 64000:65535

In the documentation of ipnat(5) there's written that for this to
reliably work you have to recompile the world with limited PID_MAX but
it works without it.


> List of active sessions:
> MAP 10.0.0.2 3610 <- -> 192.168.0.50 8666 [66.249.85.83 80]
> MAP 10.0.0.2 3609 <- -> 192.168.0.50 8665 [66.249.85.83 80]
> MAP 10.0.0.2 3608 <- -> 192.168.0.50 8664 [66.249.85.19 80]
> MAP 10.0.0.2 3607 <- -> 192.168.0.50 8663 [194.204.152.34 53]
> MAP 10.0.0.2 3606 <- -> 192.168.0.50 8662 [66.249.85.83 80]
>


Michal

_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • ipnat and "ping" problem.
    ... On 10.0.0.2 machine I cant ping any host in internet. ... Whats wrong?? ... List of active MAP/Redirect filters: ...
    (freebsd-questions)
  • Re: Why cant I connect?
    ... on getting reliable access to the internal interface of the ISA Server ... As far as Internet access goes, are these clients SNAT clients, Firewall ... Also, some cant ping, but can ...
    (microsoft.public.isa)
  • Re: changing to domain from workgroup
    ... the correct ip addresses, gateway, dns. ... I cant ping the server, ... get out on the internet. ... Even using a wirelss connection, I still can't see the network or the ...
    (microsoft.public.windowsxp.network_web)
  • RE: Desperate !!!
    ... As mentioned internal desktops cant ping server, ... But do have very slow internet access via ...
    (microsoft.public.isa.configuration)
  • Why cant I connect?
    ... Firstly, some computers ... cant ping Server3, but they can access it via their ... Also, some cant ping, but can ... The internet has been setup exactly the same on all of ...
    (microsoft.public.isa)