Re: ipf and ipnat stopped working, no routing between nics.

Hi,
I rebooted my machine last night, and everything started working again.
But no, I didnt check that. And after I was looking at some sysctls
late last night, I did speculate about whether those you mention were
right or not.

Problem resolved, and thanks for the help :)


ps. Sorry I accidentally spammed the list. It didnt seem as if my
emails went through at the time.
On 3/31/06, Erik Norgaard <norgaard@xxxxxxxxxxxx> wrote:
Daniel A. wrote:
Hi,
I run a FreeBSD 6.0 at home in my closet.
Yesterday, while I was linking IRCd services with a friend of mine, my router
completely stopped routing any packets between the internal nic (sis0) and
the external nic (rl0).
The only thing that I can think of, whoich could have caused this, is that I
ran ettercap on the server to diagnose why our servers wouldnt link. I did NOT
run any ARP poisoning or DNS spoofing attacks on myself.
But I didnt notice if the routing stopped at that point, or later, because I
could always connect to my server, and the server could always connect to the
internet. The situation is still the same.

I have tried to do
- "ipf -Fa -f /etc/ipf.rules; ipnat -FC -f /etc/ipnat.rules" - Didnt help
- "cd /etc/rc.d; ./ipfilter restart; ./ipnat restart" - Didnt help
- Launch ettercap again and exit "cleanly" after telling it to stop sniffing.
A tcpdump reveals that, indeed, no packets at all make it from sis0 to rl0.
So my conclusion is that ipnat "forgot" how to route between the two
interfaces.

Could anyone please give some pointers?

did you check

# sysctl -a |grep forward

you should have

net.inet.ip.forwarding: 1
net.inet.ip.fastforwarding: 0
net.inet6.ip6.forwarding: 0

Erik
--
Ph: +34.666334818 web: www.locolomo.org
S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt
Subject ID: 9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72
Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9

_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: no emails in exchange activesync
    ... > Rich R wrote: ... >> didnt have active or background scanning enabled on the private store. ... then check the following registry key exists on the server ...
    (microsoft.public.windows.server.sbs)
  • Re: Informix Dynamic server - how to se Croatian language characters
    ... One thing you should check is what DB_LOCALE is set to on the server. ... check the server environment variables match up with your ol_test.cmd file, and make sure however you're inserting the data you set the locale variables to match the server. ... Under "CODE SET CONVERSION FILES" I didnt know what to choose so I didnt choose anything, under "OS EQUIVALENT LOCALES" I didnt have anything wise to choose so I clicked finish, he said that he put files in gls\lc11\sh_hr\.... ... So I installed only GLS locales. ...
    (comp.databases.informix)
  • RE: OWA problems after installing exchange 2003 sp1
    ... Actually in the 2nd post i stated server could not be found that was ... because the workstation i setup didnt have the correct dns server, ...
    (microsoft.public.exchange.setup)