Здравствуйте, Ruben. >> If not ... how do I figure out what's wrong? What is your ipfw rules?
Вы писали 17 сентября 2009 г., 20:45:01: RdG> On Thu, Sep 17, 2009 at 10:14:15AM -0400, Robert Huff typed: >> >> I have a machine running >> >> FreeBSD 9.0-CURRENT #3: Tue Sep 15 18:49:58 EDT 2009 amd64 >> >> It has this in the config file for the running kernel: >> >> options IPFIREWALL #firewall >> options IPFIREWALL_VERBOSE #enable logging to syslogd(8) >> options IPFIREWALL_VERBOSE_LIMIT=100 #limit verbosity >> options IPFIREWALL_DEFAULT_TO_ACCEPT #allow everything by default >> options IPFIREWALL_NAT #ipfw kernel nat support >> options LIBALIAS >> >> It (10.0.0.1) connects correctly to another machine (10.0.0.3); >> I know because .3 mounts one of .1's disks using Samba. >> With the ipfw rules appended below, I can't NAT, nor should I >> be able to. ("em0" faces the Internet; "em1" faces the other >> machine.) >> However: using these I still can't get through RdG> Through to what? You seem to be able to connect on a local subnet, but RdG> not to the internet through NAT, which you say is ok, because you shouldn't ? RdG> Please explain exactly what you want to do. >> Have I forgotten something? Or misunderstood something? >> If not ... how do I figure out what's wrong? RdG> /var/log/security is a good place to start, as your config seems to log allmost RdG> all denies. RdG> BTW, CURRENT is a development branch. Fine if you want to run it, but you RdG> should do some basic debugging yourself before posting problems with it. And RdG> then the -questions list is probably not the best place to find answers. -- С уважением, Коньков mailto:kes-...@yandex.ru _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"