RE: FreeBSD 5.1 - WinXP Networking Problem UPDATE #2
-Original Message- From: freebsder [mailto:[EMAIL PROTECTED] Sent: Sunday, July 18, 2004 10:16 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: FreeBSD 5.1 - WinXP Networking Problem UPDATE #2 Hi Mark, I put in: natd_flags=-dynamic But I could not get it up and running. Btw, previously, what I've been doing to get the machine on line was typing in: # ipfw add 100 allow tcp from any to any via any 00100 allow tcp from any to any # ipfw add 100 allow ip from any to any via any 00100 allow ip from any to any I'm doing this because this allows me to surf the web and download my Email respectively. So when I do an ipfw, I get: # ipfw -a list 00100 308 68064 allow tcp from any to any 00100 38 3187 allow ip from any to any 65535 337 23993 deny ip from any to any Now, after I made the change you suggested and rebooted, I got: # ipfw -a list 00050 276 17396 divert 8668 ip from any to any via tun0 00100 134 14156 allow ip from any to any via lo0 00200 0 0 deny ip from any to 127.0.0.0/8 00300 0 0 deny ip from 127.0.0.0/8 to any 65000 0 0 allow ip from any to any 65535 0 0 deny ip from any to any Then I tried pinging out from my Win XP box to no avail. I even added: # ipfw add 100 allow tcp from any to any via any 00100 allow tcp from any to any # ipfw add 100 allow ip from any to any via any 00100 allow ip from any to any to get: 00050 286 17938 divert 8668 ip from any to any via tun0 00100 134 14156 allow ip from any to any via lo0 00100 0 0 allow tcp from any to any 00100 0 0 allow ip from any to any 00200 0 0 deny ip from any to 127.0.0.0/8 00300 0 0 deny ip from 127.0.0.0/8 to any 65000 0 0 allow ip from any to any 65535 0 0 deny ip from any to any but still no dice! I'm thinking I should probably Delete the following two lines from above: 00200 0 0 deny ip from any to 127.0.0.0/8 00300 0 0 deny ip from 127.0.0.0/8 to any and see what happends. I will try this out now, but if you have any other suggestions, prey tell. as always ... thankyou. Your Message:: Jumping in late, natd_enable=YES # forward from inside natd_interface=tun0 # this being the connection to outside world natd_flags=-dynamic # because the ip addy may change I don't know what your trying to do here?? natd_flags=redirect_port tcp 192.168.1.1:80 80 I would remove this until you get everything else working. This all looks fine to me. Is your winxp gateway set correctly? It should be the internal IP of your FreeBSd box. dave ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
FreeBSD 5.1 - WinXP Networking Problem UPDATE #2
Hi Chuck,
Thanks for the suggestions.
First off - there was actually a typo in the line:
firewall_script=/etc/rc/firewall
I changed it to:
firewall_script=/etc/rc.firewall
However, it made no difference to the WinXP box
ability to connect.
Next I tried commenting out that line altogether but
it still did not work(!) It would not go online.
I then checked out rc.firewall asper you suggestion
and looked under OPEN ... This is what I found:::
# If you just configured ipfw in the kernel as a tool
to solve network
# problems or you just want to disallow some
particular kinds of traffic
# then you will want to change the default policy to
open. You can also
# do this as your only action by setting the
firewall_type to ``open''.
#
#${fwcmd} add 65000 pass all from any to any
# Prototype setups.
#
case ${firewall_type} in
[Oo][Pp][Ee][Nn])
setup_loopback
${fwcmd} add 65000 pass all from any to any
;;
[...]
Do you see a problem in this set-up?
I am considering setting it up in SIMPLE mode but I
want to be able to run the machine in OPEN mode before
I get too fancy with security and firewalls ... you
know?
Thanks again for you help ... please advise.
freebsder wrote:
This is what I get:
# ipfw -a list
00100 49820 12066079 allow ip from any to any
00100 00 allow tcp from any to any
65535 2 96 deny ip from any to any
The Second and Third lines don't seem right.. What
do
I need to do correct the problem here.
The line here:
firewall_script=/etc/rc/firewall
...tells IPFW to use a config file that doesn't
contain enough useful
rules.
Comment out that line, and examine /etc/rc.firewall
instead, and
reboot. Then
take a look at the rules being loaded by the OPEN
firewall type, which
should
include a divert rule...
--
-Chuck
__
Do you Yahoo!?
Vote for the stars of Yahoo!'s next ad campaign!
http://advision.webevents.yahoo.com/yahoo/votelifeengine/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD 5.1 - WinXP Networking Problem UPDATE #2
Hi Mark, I put in: natd_flags=-dynamic But I could not get it up and running. Btw, previously, what I've been doing to get the machine on line was typing in: # ipfw add 100 allow tcp from any to any via any 00100 allow tcp from any to any # ipfw add 100 allow ip from any to any via any 00100 allow ip from any to any I'm doing this because this allows me to surf the web and download my Email respectively. So when I do an ipfw, I get: # ipfw -a list 00100 308 68064 allow tcp from any to any 00100 38 3187 allow ip from any to any 65535 337 23993 deny ip from any to any Now, after I made the change you suggested and rebooted, I got: # ipfw -a list 00050 276 17396 divert 8668 ip from any to any via tun0 00100 134 14156 allow ip from any to any via lo0 00200 0 0 deny ip from any to 127.0.0.0/8 00300 0 0 deny ip from 127.0.0.0/8 to any 65000 0 0 allow ip from any to any 65535 0 0 deny ip from any to any Then I tried pinging out from my Win XP box to no avail. I even added: # ipfw add 100 allow tcp from any to any via any 00100 allow tcp from any to any # ipfw add 100 allow ip from any to any via any 00100 allow ip from any to any to get: 00050 286 17938 divert 8668 ip from any to any via tun0 00100 134 14156 allow ip from any to any via lo0 00100 0 0 allow tcp from any to any 00100 0 0 allow ip from any to any 00200 0 0 deny ip from any to 127.0.0.0/8 00300 0 0 deny ip from 127.0.0.0/8 to any 65000 0 0 allow ip from any to any 65535 0 0 deny ip from any to any but still no dice! I'm thinking I should probably Delete the following two lines from above: 00200 0 0 deny ip from any to 127.0.0.0/8 00300 0 0 deny ip from 127.0.0.0/8 to any and see what happends. I will try this out now, but if you have any other suggestions, prey tell. as always ... thankyou. Your Message:: Jumping in late, natd_enable=YES # forward from inside natd_interface=tun0 # this being the connection to outside world natd_flags=-dynamic # because the ip addy may change I don't know what your trying to do here?? natd_flags=redirect_port tcp 192.168.1.1:80 80 I would remove this until you get everything else working. Hi Bill, __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
FreeBSD 5.1 - WinXP Networking Problem UPDATE #2
OK - I have taken everyone's advice and made some changes to my rc.conf. Things have improved ... All my computers can ping each other! BUT I can only connect to the internet from the FreeBSD server. All requests made by the WinXP machines go unanswered!! Yet when I ping from them, they can connect to any computer on the network BUT CANNOT ping OUTSIDE the network nor fetch any information outside this network. Any ideas why my FreeBSD machine is not routing these requests and putting up a road block? RC.CONF font8x14=NO font8x16=swiss-8x16 font8x8=swiss-8x8 inetd_enable=YES linux_enable=YES moused_enable=YES moused_port=/dev/psm0 moused_type=auto nfs_client_enable=YES nfs_server_enable=YES rpcbind_enable=YES saver=rain scrnmap=NO usbd_enable=YES ifconfig_vr0=DHCP ifconfig_ed0=DHCP ##initialise NIC network_interfaces=vr0 ed0 lo0 tun0 ifconfig tun0 #ifconfig vr0= media 10baseT/UTP up #ifconfig_ed0=inet 192.168.0.3 netmask 255.255.0.0 #Changes as suggested: ifconfig_ed0=inet 192.168.1.1/24 ifconfig_vr0=inet 192.168.0.1/24 media 10baseT/UTP up #ifconfig_vr0=inet 192.168.0.1 netmask 255.255.0.0 hostname=my.server.com ##User ppp configuration ppp_enable=YES ppp_mode=ddial ppp_nat=NO ppp_profile=bellnet #ppp_user=root ## Firewall gateway_enable=YES firewall_enable=YES firewall_type=OPEN #firewall_quiet=NO firewall_script=/etc/rc/firewall natd_enable=YES natd_interface=vr0 natd_flags=redirect_port tcp 192.168.1.1:80 80 rpc_statd_enable=YES tcp_extensions=YES ## Mail sendmail_enable=YES __ Do you Yahoo!? Yahoo! Mail - 50x more storage than other providers! http://promotions.yahoo.com/new_mail ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD 5.1 - WinXP Networking Problem UPDATE #2
freebsder wrote: Any ideas why my FreeBSD machine is not routing these requests and putting up a road block? [ ... ] firewall_type=OPEN #firewall_quiet=NO firewall_script=/etc/rc/firewall natd_enable=YES There's likely to be a problem with /etc/rc/firewall, assuming that even exists. Does ipfw -a list show a divert rule to natd? -- -Chuck ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD 5.1 - WinXP Networking Problem UPDATE #2
Hi Chuck, This is what I get: # ipfw -a list 00100 49820 12066079 allow ip from any to any 00100 00 allow tcp from any to any 65535 2 96 deny ip from any to any The Second and Third lines don't seem right.. What do I need to do correct the problem here. The Firewall Type is set to OPEN - doesn't that mean that it would not really matter how the firewall issetup. (btw, please excuse my overt ignorance.) I had it set to SIMPLE before and made some changes to the firewall file but it was not working so I just set it at OPEN and was able to access the internet. Although now this may pose a problem with this network. Please advise. I can send you a copy of my existing firewall file if needed ... Thanks as always freebsder wrote: Any ideas why my FreeBSD machine is not routing these requests and putting up a road block? [ ... ] firewall_type=OPEN #firewall_quiet=NO firewall_script=/etc/rc/firewall natd_enable=YES There's likely to be a problem with /etc/rc/firewall, assuming that even exists. Does ipfw -a list show a divert rule to natd? -- -Chuck __ Do you Yahoo!? Vote for the stars of Yahoo!'s next ad campaign! http://advision.webevents.yahoo.com/yahoo/votelifeengine/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD 5.1 - WinXP Networking Problem UPDATE #2
freebsder [EMAIL PROTECTED] wrote: All my computers can ping each other! BUT I can only connect to the internet from the FreeBSD server. All requests made by the WinXP machines go unanswered!! Yet when I ping from them, they can connect to any computer on the network BUT CANNOT ping OUTSIDE the network nor fetch any information outside this network. Any ideas why my FreeBSD machine is not routing these requests and putting up a road block? RC.CONF font8x14=NO font8x16=swiss-8x16 font8x8=swiss-8x8 inetd_enable=YES linux_enable=YES moused_enable=YES moused_port=/dev/psm0 moused_type=auto nfs_client_enable=YES nfs_server_enable=YES rpcbind_enable=YES saver=rain scrnmap=NO usbd_enable=YES ifconfig_vr0=DHCP ifconfig_ed0=DHCP ##initialise NIC network_interfaces=vr0 ed0 lo0 tun0 ifconfig tun0 #ifconfig vr0= media 10baseT/UTP up #ifconfig_ed0=inet 192.168.0.3 netmask 255.255.0.0 #Changes as suggested: ifconfig_ed0=inet 192.168.1.1/24 ifconfig_vr0=inet 192.168.0.1/24 media 10baseT/UTP up #ifconfig_vr0=inet 192.168.0.1 netmask 255.255.0.0 hostname=my.server.com ##User ppp configuration ppp_enable=YES ppp_mode=ddial ppp_nat=NO ppp_profile=bellnet #ppp_user=root ## Firewall gateway_enable=YES firewall_enable=YES firewall_type=OPEN #firewall_quiet=NO firewall_script=/etc/rc/firewall natd_enable=YES natd_interface=vr0 I believe you'll want: natd_interface=ppp0 or is it tun0? I don't remember (long time since I've used ppp) but the upshot is that whatever interface ppp creates when it dials, that's what you want natd_interface set to. natd_flags=redirect_port tcp 192.168.1.1:80 80 rpc_statd_enable=YES tcp_extensions=YES ## Mail sendmail_enable=YES -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD 5.1 - WinXP Networking Problem UPDATE #2
On Fri, 16 Jul 2004, freebsder wrote: Hi Chuck, This is what I get: # ipfw -a list 00100 49820 12066079 allow ip from any to any 00100 00 allow tcp from any to any 65535 2 96 deny ip from any to any The Second and Third lines don't seem right.. What do I need to do correct the problem here. First, you need to stop top-posting, which makes it difficult to reply. If you carefully read Chuck's response to you: There's likely to be a problem with /etc/rc/firewall, He's trying to tell you that should be /etc/rc.firewall (note the dot). -Warren Block * Rapid City, South Dakota USA ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD 5.1 - WinXP Networking Problem UPDATE #2
Hi Bill, The interface creates tun0 when it dials but I tried both tun0 and ppp0 and neither seemed to do the trick. Any other trouble shooting thoughts or ideas? Nav new RC.CONF : ## Firewall [...] natd_interface=tun0 #natd_interface=ppp0 #natd_interface=vr0 natd_flags=redirect_port tcp 192.168.1.1:80 80 rpc_statd_enable=YES tcp_extensions=YES ## Mail sendmail_enable=YES IFCONFIG : #ifconfig ed0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 inet 192.168.1.1 netmask 0xff00 broadcast 192.168.1.255 inet6 fe80::280:c8ff:fede:c937%ed0 prefixlen 64 scopeid 0x1 ether 00:80:c8:de:c9:37 vr0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 inet6 fe80::20e:a6ff:fe9c:c81d%vr0 prefixlen 64 scopeid 0x2 inet 192.168.0.1 netmask 0xff00 broadcast 192.168.0.255 ether 00:0e:a6:9c:c8:1d media: Ethernet 10baseT/UTP status: active lp0: flags=8810POINTOPOINT,SIMPLEX,MULTICAST mtu 1500 lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 16384 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4 inet 127.0.0.1 netmask 0xff00 tun0: flags=8051UP,POINTOPOINT,RUNNING,MULTICAST mtu 1492 inet 6X.7X.5X.23X -- 6X.23X.25X.12X netmask 0x Opened by PID 215 ORIGINAL MESSAGE Subject: Re: FreeBSD 5.1 - WinXP Networking Problem UPDATE #2 freebsder [EMAIL PROTECTED] wrote: All my computers can ping each other! BUT I can only connect to the internet from the FreeBSD server. All requests made by the WinXP machines go unanswered!! Yet when I ping from them, they can connect to any computer on the network BUT CANNOT ping OUTSIDE the network nor fetch any information outside this network. Any ideas why my FreeBSD machine is not routing these requests and putting up a road block? RC.CONF font8x14=NO font8x16=swiss-8x16 font8x8=swiss-8x8 inetd_enable=YES linux_enable=YES moused_enable=YES moused_port=/dev/psm0 moused_type=auto nfs_client_enable=YES nfs_server_enable=YES rpcbind_enable=YES saver=rain scrnmap=NO usbd_enable=YES ifconfig_vr0=DHCP ifconfig_ed0=DHCP ##initialise NIC network_interfaces=vr0 ed0 lo0 tun0 ifconfig tun0 #ifconfig vr0= media 10baseT/UTP up #ifconfig_ed0=inet 192.168.0.3 netmask 255.255.0.0 #Changes as suggested: ifconfig_ed0=inet 192.168.1.1/24 ifconfig_vr0=inet 192.168.0.1/24 media 10baseT/UTP up #ifconfig_vr0=inet 192.168.0.1 netmask 255.255.0.0 hostname=my.server.com ##User ppp configuration ppp_enable=YES ppp_mode=ddial ppp_nat=NO ppp_profile=bellnet #ppp_user=root ## Firewall gateway_enable=YES firewall_enable=YES firewall_type=OPEN #firewall_quiet=NO firewall_script=/etc/rc/firewall natd_enable=YES natd_interface=vr0 I believe you'll want: natd_interface=ppp0 or is it tun0? I don't remember (long time since I've used ppp) but the upshot is that whatever interface ppp creates when it dials, that's what you want natd_interface set to. natd_flags=redirect_port tcp 192.168.1.1:80 80 rpc_statd_enable=YES tcp_extensions=YES ## Mail sendmail_enable=YES __ Do you Yahoo!? Vote for the stars of Yahoo!'s next ad campaign! http://advision.webevents.yahoo.com/yahoo/votelifeengine/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD 5.1 - WinXP Networking Problem UPDATE #2
On Fri, Jul 16, 2004 at 06:37:08PM -0700, freebsder wrote: Jumping in late, natd_enable=YES # forward from inside natd_interface=tun0 # this being the connection to outside world natd_flags=-dynamic # because the ip addy may change I don't know what your trying to do here?? natd_flags=redirect_port tcp 192.168.1.1:80 80 I would remove this until you get everything else working. Hi Bill, The interface creates tun0 when it dials but I tried both tun0 and ppp0 and neither seemed to do the trick. Any other trouble shooting thoughts or ideas? Nav new RC.CONF : ## Firewall [...] natd_interface=tun0 #natd_interface=ppp0 #natd_interface=vr0 natd_flags=redirect_port tcp 192.168.1.1:80 80 rpc_statd_enable=YES tcp_extensions=YES ## Mail sendmail_enable=YES IFCONFIG : #ifconfig ed0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 inet 192.168.1.1 netmask 0xff00 broadcast 192.168.1.255 inet6 fe80::280:c8ff:fede:c937%ed0 prefixlen 64 scopeid 0x1 ether 00:80:c8:de:c9:37 vr0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 inet6 fe80::20e:a6ff:fe9c:c81d%vr0 prefixlen 64 scopeid 0x2 inet 192.168.0.1 netmask 0xff00 broadcast 192.168.0.255 ether 00:0e:a6:9c:c8:1d media: Ethernet 10baseT/UTP status: active lp0: flags=8810POINTOPOINT,SIMPLEX,MULTICAST mtu 1500 lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 16384 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4 inet 127.0.0.1 netmask 0xff00 tun0: flags=8051UP,POINTOPOINT,RUNNING,MULTICAST mtu 1492 inet 6X.7X.5X.23X -- 6X.23X.25X.12X netmask 0x Opened by PID 215 ORIGINAL MESSAGE Subject: Re: FreeBSD 5.1 - WinXP Networking Problem UPDATE #2 freebsder [EMAIL PROTECTED] wrote: All my computers can ping each other! BUT I can only connect to the internet from the FreeBSD server. All requests made by the WinXP machines go unanswered!! Yet when I ping from them, they can connect to any computer on the network BUT CANNOT ping OUTSIDE the network nor fetch any information outside this network. Any ideas why my FreeBSD machine is not routing these requests and putting up a road block? RC.CONF font8x14=NO font8x16=swiss-8x16 font8x8=swiss-8x8 inetd_enable=YES linux_enable=YES moused_enable=YES moused_port=/dev/psm0 moused_type=auto nfs_client_enable=YES nfs_server_enable=YES rpcbind_enable=YES saver=rain scrnmap=NO usbd_enable=YES ifconfig_vr0=DHCP ifconfig_ed0=DHCP ##initialise NIC network_interfaces=vr0 ed0 lo0 tun0 ifconfig tun0 #ifconfig vr0= media 10baseT/UTP up #ifconfig_ed0=inet 192.168.0.3 netmask 255.255.0.0 #Changes as suggested: ifconfig_ed0=inet 192.168.1.1/24 ifconfig_vr0=inet 192.168.0.1/24 media 10baseT/UTP up #ifconfig_vr0=inet 192.168.0.1 netmask 255.255.0.0 hostname=my.server.com ##User ppp configuration ppp_enable=YES ppp_mode=ddial ppp_nat=NO ppp_profile=bellnet #ppp_user=root ## Firewall gateway_enable=YES firewall_enable=YES firewall_type=OPEN #firewall_quiet=NO firewall_script=/etc/rc/firewall natd_enable=YES natd_interface=vr0 I believe you'll want: natd_interface=ppp0 or is it tun0? I don't remember (long time since I've used ppp) but the upshot is that whatever interface ppp creates when it dials, that's what you want natd_interface set to. natd_flags=redirect_port tcp 192.168.1.1:80 80 rpc_statd_enable=YES tcp_extensions=YES ## Mail sendmail_enable=YES __ Do you Yahoo!? Vote for the stars of Yahoo!'s next ad campaign! http://advision.webevents.yahoo.com/yahoo/votelifeengine/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- -- ** The information contained in this communication is confidential, private, proprietary, or otherwise privileged and is intended only for the use of the addressee. Unauthorized use, disclosure, distribution or copying is strictly prohibited and may be unlawful. If you have received this communication in error, please notify the sender immediately. ** == ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org
