Network problem after upgrade from 5.1 to 5.3

2005-01-30 Thread Aleksander Rozman - Andy
Hi !
I am long time user of FreeBSD and for must updates so far I hadn't had 
much to do (maybe option here and option there, but networking never 
changes), but after upgrade from 5.1 to 5.3 everything stoped working. 
Since I couldn't rebuild kernel (some internal problems), I decided to 
delete everything and reinstal from scratch (last time I did this was when 
disk crashed, and that was about 5 years ago). But now again nothing works. 
I didn't change any configuration files since instalation except, rc.conf, 
and copied my firewall.conf and natd.conf...

Even after recompiled I couldn't use network. My FreeBSD is used as server 
and also router for my internal network (using NAT).

Problem:
==
If I disable firewall, natd is turned down so inside computers can't get to 
internet through FreeBSD box, if enabled, then nothing works. It seems like 
small trouble in Firewall, but I don't know why. I usually didn't make any 
changes to firewall since I am not guru there...


Config:
=
 FreeBSD BOX- dc0: external IP
  |
 V
  rl0: internal IP 192.168.44.1   -  Hub
I was using NATD and firewall (I have my own rules for both and everything 
worked before), I have compiled IPDIVERT and IPFIREWALL into kernel.

Startup rc.conf:
===
defaultrouter=xx.xx.5.1   # Set to default gateway (or NO).
firewall_enable=YES   # Set to YES to enable firewall functionality
firewall_silent=YES
firewall_type=/etc/firewall.conf  # Firewall type (see /etc/rc.firewall)
gateway_enable=YES# Set to YES if this host will be a gateway.
hostname=atechnet.dhs.org # Set this!
ifconfig_dc0=inet xx.xx.5.51 netmask 255.255.255.0
ifconfig_lo0=inet 127.0.0.1 netmask 255.255.255.0
ifconfig_rl0=inet 192.168.44.1 netmask 255.255.255.0
natd_enable=YES   # Enable natd (if firewall_enable ==YES).
natd_flags=-s -u -f /etc/natd.conf
natd_interface=dc0
network_interfaces=auto
natd.conf  (This is just for redirection of emule ports)
===
redirect_port tcp 192.168.44.2:4662 4662
redirect_port udp 192.168.44.2:4672 4672
redirect_port tcp 192.168.44.2:4711 4711
redirect_port tcp 192.168.44.1:5432 5432
redirect_port udp 192.168.44.1:5432 5432
firewall.conf   (this is open firewall with added ports for redirection)
=
add 00050 set 0 divert 8668 ip from any to any
add 00100 set 0 allow ip from any to any
add 00200 set 0 deny ip from any to 127.0.0.0/8
add 00300 set 0 deny ip from 127.0.0.0/8 to any
add 1 set 0 allow udp from any 4672 to 192.168.44.2 dst-port 4672
add 10001 set 0 allow tcp from any 4662 to 192.168.44.2 dst-port 4662
add 10002 set 0 allow tcp from any 4711 to 192.168.44.2 dst-port 4711
add 65000 set 0 allow ip from any to any

Please help me, I need to make my server active again, but I can't do that 
unless whole network is working...

Andy

**
*  Aleksander Rozman - Andy  * Fandoms:  E2:EA, SAABer, Trekkie, Earthie *
* [EMAIL PROTECTED] * Sentinel, BH 90210, True's Trooper,   *
*[EMAIL PROTECTED]   * Heller's Angel, Questie, Legacy, PO5, *
* Maribor, Slovenia (Europe) * Profiler, Buffy (Slayerete), Pretender*
* ICQ-UIC: 4911125   *
* PGP key available  *http://www.atechnet.dhs.org/~andy/ *
**
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Network problem after upgrade from 5.1 to 5.3

2005-01-29 Thread Aleksander Rozman - Andy
Hi !
I am long time user of FreeBSD and for must updates so far I hadn't had 
much to do (maybe option here and option there, but networking never 
changes), but after upgrade from 5.1 to 5.3 everything stoped working. 
Since I couldn't rebuild kernel (some internal problems), I decided to 
delete everything and reinstal from scratch (last time I did this was when 
disk crashed, and that was about 5 years ago). But now again nothing works. 
I didn't change any configuration files since instalation except, rc.conf, 
and copied my firewall.conf and natd.conf...

Even after recompiled I couldn't use network. My FreeBSD is used as server 
and also router for my internal network (using NAT).

Problem:
==
If I disable firewall, natd is turned down so inside computers can't get to 
internet through FreeBSD box, if enabled, then nothing works. It seems like 
small trouble in Firewall, but I don't know why. I usually didn't make any 
changes to firewall since I am not guru there...


Config:
=
 FreeBSD BOX- dc0: external IP
  |
 V
  rl0: internal IP 192.168.44.1   -  Hub
I was using NATD and firewall (I have my own rules for both and everything 
worked before), I have compiled IPDIVERT and IPFIREWALL into kernel.

Startup rc.conf:
===
defaultrouter=xx.xx.5.1   # Set to default gateway (or NO).
firewall_enable=YES   # Set to YES to enable firewall functionality
firewall_silent=YES
firewall_type=/etc/firewall.conf  # Firewall type (see /etc/rc.firewall)
gateway_enable=YES# Set to YES if this host will be a gateway.
hostname=atechnet.dhs.org # Set this!
ifconfig_dc0=inet xx.xx.5.51 netmask 255.255.255.0
ifconfig_lo0=inet 127.0.0.1 netmask 255.255.255.0
ifconfig_rl0=inet 192.168.44.1 netmask 255.255.255.0
natd_enable=YES   # Enable natd (if firewall_enable ==YES).
natd_flags=-s -u -f /etc/natd.conf
natd_interface=dc0
network_interfaces=auto
natd.conf  (This is just for redirection of emule ports)
===
redirect_port tcp 192.168.44.2:4662 4662
redirect_port udp 192.168.44.2:4672 4672
redirect_port tcp 192.168.44.2:4711 4711
redirect_port tcp 192.168.44.1:5432 5432
redirect_port udp 192.168.44.1:5432 5432
firewall.conf   (this is open firewall with added ports for redirection)
=
add 00050 set 0 divert 8668 ip from any to any
add 00100 set 0 allow ip from any to any
add 00200 set 0 deny ip from any to 127.0.0.0/8
add 00300 set 0 deny ip from 127.0.0.0/8 to any
add 1 set 0 allow udp from any 4672 to 192.168.44.2 dst-port 4672
add 10001 set 0 allow tcp from any 4662 to 192.168.44.2 dst-port 4662
add 10002 set 0 allow tcp from any 4711 to 192.168.44.2 dst-port 4711
add 65000 set 0 allow ip from any to any

Please help me, I need to make my server active again, but I can't do that 
unless whole network is working...

Andy

**
*  Aleksander Rozman - Andy  * Fandoms:  E2:EA, SAABer, Trekkie, Earthie *
* [EMAIL PROTECTED] * Sentinel, BH 90210, True's Trooper,   *
*[EMAIL PROTECTED]   * Heller's Angel, Questie, Legacy, PO5, *
* Maribor, Slovenia (Europe) * Profiler, Buffy (Slayerete), Pretender*
* ICQ-UIC: 4911125   *
* PGP key available  *http://www.atechnet.dhs.org/~andy/ *
**
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]