TCP packets don't flow from external hosts to WinVista clients behind nat

Hello...
I've got a strange trouble...
FreeBSD 6.2 amd64 as nat-router:
rl0 85.249.249.249 -> ISP
fxp0 10.0.0.1 -> My Internat Net
natd/ng_nat
ipfw: allow all from any to any

WinXP client machines work fine behind nat, but WinVista, FreeBSD (5.5/6.2) clients don't.
It's very strange but it's unable to establish any TCP internet connection from non WinXP host. ICMP and UDP packets flows normally.
For example, I can ping host ya.ru, get DNS-reply from internet servers, play games via UDP, but i can't view web pages, open shh session and just can't "telnet" to any port!!!!
Traffic from/to my net is not filtering by firewalls at all. I've tested it with natd ang ng_nat - there's no difference! I've tried to solve this problem during last week =( Unfortunately, i can't. Now i'm going to try using pf or ipfilter instead of ipfw or ever reinstall server OS and may be change freebsd architecture to i386.

Any ideas ?
P.S.Sorry for my bad english.

_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: ipfw + nat + port_redirect - works, but not for the internal net
    ... Have you tried an ipfw fwd rule? ... > xl0 - external interface ... > It works only for host from outside (Internet). ... > to be into FreeBSD handbook - otherwise, ...
    (FreeBSD-Security)
  • Re: FreeBSD as a router
    ... I am not sure that FreeBSD + IPFW is the best option for you as you have ... Connection to Internet are made via VPN to ISP, ... How to give all users right to go to the Internet by UDP ...
    (freebsd-questions)
  • Re: ipfw + nat + port_redirect - works, but not for the internal net
    ... on the external interface to internal host: ... >> I have FreeBSD 4.5 RELEASE as Firewall with two NICs: ... >> It works only for host from outside (Internet). ... >> What rules to ipfw or natd I need in order to permit ...
    (FreeBSD-Security)
  • ipfw + nat + port_redirect - works, but not for the internal net
    ... I have FreeBSD 4.5 RELEASE as Firewall with two NICs: ... It works only for host from outside (Internet). ... What rules to ipfw or natd I need in order to permit ...
    (FreeBSD-Security)
  • RE: firewall
    ... You need to do a lot of reading about ipfw ... IPFW is the only firewall available to FBSD, ... rules do not function correctly on a DSL or cable internet ... @320 pass in quick on rl0 proto tcp from 63.70.155.0/24 to any port ...
    (freebsd-questions)