Re: Problems with ipfw/natd and axe(4)

2013-04-13 Thread Luigi Rizzo
On Sat, Apr 13, 2013 at 03:34:39PM +0200, Spil Oss wrote: > Hi All, > > I can't use ipfw with natd with my ASIX AX88772B USB NIC ... > Found an older PR kern/170081 about fxp having trouble with nat when > rxcsum/txcsum was enabled, that is why I started fiddling with > rxcsum/txcsum and found tha

Re: Problems with ipfw/natd and axe(4)

2013-04-13 Thread Michael Sierchio
There are some things about this ruleset that are confused. Multiple deny rules where one will do, et. > 01100 deny ip from 10.16.2.1 to any in via ue0 > 01200 deny ip from 172.17.2.111 to any in via re0 > 01300 deny ip from any to 10.0.0.0/8 via ue0 > 01500 deny ip from any to 192.168.0.0/16 via

Problems with ipfw/natd and axe(4)

2013-04-13 Thread Spil Oss
Hi All, I can't use ipfw with natd with my ASIX AX88772B USB NIC ipfw ruleset (slightly modified /etc/rc.firewall simple ruleset) 00010 allow ip from any to me dst-port 22 recv ue0 00010 allow tcp from me 22 to any xmit ue0 00100 allow ip from any to any via lo0 00200 deny ip from any to 127.0.0.