another go at ipfw/natd

2003-01-16 Thread Redmond Militante
hi again i have two machines - one has two nics, one has one nic. i'd like to set up the machine with two nics as a gateway/natd box, and place the second machine behind it. gateway machine's kernel has been recompiled with: options IPFIREWALL options IPDIVERT options

Re: another go at ipfw/natd

2003-01-16 Thread Bill Moran
Redmond Militante wrote: hi again i have two machines - one has two nics, one has one nic. i'd like to set up the machine with two nics as a gateway/natd box, and place the second machine behind it. gateway machine's kernel has been recompiled with: options IPFIREWALL options IPDIVERT

Re: another go at ipfw/natd

2003-01-16 Thread Redmond Militante
Let me ask some questions to help diagnose this: 1. From the gateway: Can you ping www.freebsd.org? Can you ping 129.x.x.1? yes to both 2. What's in /etc/resolv.conf on the gateway and the client machine? /etc/resolv.conf is identical on gateway and client machines search

Re: another go at ipfw/natd

2003-01-16 Thread Daniel Schrock
Redmond Militante wrote: xl1: flags=3D8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 options=3D3rxcsum,txcsum inet 10.0.0.1 netmask 0xff00 broadcast 10.0.0.255 inet6 fe80::206:5bff:fe80:985b%xl1 prefixlen 64 scopeid 0x2=20 ether 00:06:5b:80:98:5b

Re: another go at ipfw/natd

2003-01-16 Thread Bill Moran
Redmond Militante wrote: snip reply that verifies that DNS is configured properly 3. What does ifconfig display on the gateway? Does xl1 show as up with a valid media type? SNIP xl1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 options=3rxcsum,txcsum inet

Re: another go at ipfw/natd

2003-01-16 Thread Redmond Militante
hi thanks this worked :) In the gothic chambers of the underworld on Thu, Jan 16, 2003 at 03:51:55PM -0600, Daniel Schrock darkly muttered: Redmond Militante wrote: xl1: flags=3D8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 options=3D3rxcsum,txcsum inet 10.0.0.1