Hello All,

        I have a problem which I think must be simple, I just can't figure out 
exactly what I need to do.  I have a gateway / firewall (freebsd 6.1) with 3 
nic cards.  I just added the third card, rl1, which I have attached to a 
wireless access point.  
        I can ping the access point from the firewall, but not from the rest of 
internal (wired) network!!??  My wired network is 192.168.1 and the wireless 
access point is currently the default  rl1 is set to
        Attached are netstat -r, my pf.conf and rc.conf from the 
Any and all help is appreciated.

Thanks in advance

Mark Moellering
# -- sysinstall generated deltas -- # Thu May 11 16:26:43 2006
# Created: Thu May 11 16:26:43 2006
# Enable network daemons for user convenience.
# Please make all changes to this file, not to /etc/defaults/rc.conf.
# This file now contains just the overrides from /etc/defaults/rc.conf.

#Internal Wired Network
ifconfig_bge0="inet  netmask"

#Wireless Network
ifconfig_rl1="inet netmask"

#External Gateway Interface


# $FreeBSD: src/share/examples/pf/faq-example1,v 1.1 2004/09/14 01:07:18 mlaier 
Exp $
# $OpenBSD: faq-example1,v 1.2 2003/08/06 16:04:45 henning Exp $

# Firewall for Home or Small Office
# http://www.openbsd.org/faq/pf/example1.html

# macros
int_if = "bge0"
ext_if = "rl0"
wint_if = "rl1"

tcp_services = "{ 22, 113 }"
icmp_types = "echoreq"

priv_nets = "{,,, }"

# options
set block-policy return
set loginterface $ext_if

# scrub
scrub in all

# nat/rdr
nat on $ext_if from $int_if:network to any -> ($ext_if)
nat on $ext_if from $wint_if:network to any -> ($ext_if)
rdr on $int_if proto tcp from any to any port 21 -> port 8021

# filter rules
block all

#pass in all

pass quick on lo0 all

block drop in on $ext_if from $priv_nets to any
block drop out on $ext_if from any to $priv_nets

pass in on $ext_if inet proto tcp from any to ($ext_if) \
   port $tcp_services flags S/SA keep state

#allow access to web server
#pass in on $ext_if inet proto tcp from $XXX to port 80 \
   flags S/SA keep state

pass in inet proto icmp all icmp-type $icmp_types keep state

pass in  on $int_if from $int_if:network to any keep state
pass out on $int_if from any to $int_if:network keep state

pass in on $wint_if from $wint_if:network to any keep state
pass out on $wint_if from any to $wint_if:network keep state

pass in on $wint_if from $int_if:network to any keep state
pass in on $int_if from $wint_if:network to any keep state

pass out on $wint_if from any to $int_if:network keep state
pass out on $int_if from any to $wint_if:network keep state

pass out on $ext_if proto tcp all modulate state flags S/SA
pass out on $ext_if proto { udp, icmp } all keep state

pass in on $ext_if inet proto tcp from any to ($ext_if) \
   user proxy keep state
Script started on Mon Jul  3 18:49:59 2006
> netstat -r

Routing tables

Destination        Gateway            Flags    Refs      Use  Netif Expire
default            c-68-61-202-129.hs UGS         0       40    rl0   link#2             UC          0        0    rl0
c-68-61-202-129.hs 00:05:5f:e9:8c:a9  UHLW        2        0    rl0   1199
localhost          localhost          UH          0        0    lo0
192.168.0          link#3             UC          0        0    rl1      00:0f:b5:7a:14:82  UHLW        1       10    rl1   1089
192.168.1          link#1             UC          0        0   bge0        00:09:5b:20:aa:23  UHLW        1       30   bge0   1107

Destination        Gateway            Flags      Netif Expire
localhost.psyberat localhost.psyberat UH          lo0
fe80::%bge0        link#1             UC         bge0
fe80::240:f4ff:fe4 00:40:f4:47:23:54  UHL         lo0
fe80::%rl0         link#2             UC          rl0
fe80::2e0:7dff:fec 00:e0:7d:c1:74:44  UHL         lo0
fe80::%rl1         link#3             UC          rl1
fe80::2e0:7dff:fea 00:e0:7d:a8:78:8e  UHL         lo0
fe80::%lo0         fe80::1%lo0        U           lo0
fe80::1%lo0        link#6             UHL         lo0
ff01:1::           link#1             UC         bge0
ff01:2::           link#2             UC          rl0
ff01:3::           link#3             UC          rl1
ff01:6::           localhost.psyberat UC          lo0
ff02::%bge0        link#1             UC         bge0
ff02::%rl0         link#2             UC          rl0
ff02::%rl1         link#3             UC          rl1
ff02::%lo0         localhost.psyberat UC          lo0
> exit


Script done on Mon Jul  3 18:50:07 2006
freebsd-questions@freebsd.org mailing list
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to