Hi,

I just changes to a static IP and the system behaves as if
net.inet.ip.forwarding did not say '1'. All I did was change the
hostname.xl0 to 'nnn.nnn.nnn.nnn 255.255.255.252 NONE' and added the gw IP
to mygate.

This is a firewall/router and has been working as expected for a long
time. I got fed up with various issues and switched to a static IP.

Sitting in it I have no access problems at all. In fact I ssh'd into it
from a LAN client and opened lynx to write this webmail. (But ended up
changing the IP of a workstation and using a GUI instead.) The point being
that LAN access works and so does the WAN connection.

Indeed I flood pinged 100'000 packets from the LAN to the router with 1
lost packet. Did the same from the openbsd box to the external WAN router
assigned to me, with some 30,000 packets and only lost 5.

When pinging from the LAN to a WAN IP it might give a reply once in a blue
moon. Which made me wonder if there is a dual route there someplace and
it's not sure where to send it.

Alas, I don't see anything wrong anywhere. My only uncertainty is the
routing table saying

192.168.0.255 link#3 UC

for the gateway for the LAN in the routing table, and not the IP. I would
have expected to see a 'G' as well. (Actually, as I'm reviewing what I
typed before sending it, I'm sure this must be the why. Though I've not
been able to add a route without it saying file exists.)

So in short networking works to and fro the openbsd box, but it does not
forward very much, and I'm at my wits end.

I suppose the only thing I've not tried is to bring pf.conf down to NAT
and forward all with the minimum lines (I can't retype it all here) and
see if that works. Though I've been through it too a number of times
trying to see any line that refers to either the old or new WAN IP. It
only refers to the external NIC via xl0 or it's alias (Cable) so any
changed of IP should not matter.


_______________________________________________
Openbsd-newbies mailing list
[email protected]
http://mailman.theapt.org/listinfo/openbsd-newbies

Reply via email to