Re: NATD: net.inet.ip.fw.default_to_accept="1" vs firewall_type="OPEN"

2013-10-10 Thread Chris Stankevitz
On Thu, Oct 10, 2013 at 8:22 PM, Michael Ross wrote: > ipfw always has one default rule, standard is > > [snip] > > Specifing firewall_type="OPEN" gives you an additional rule Michael, Thank you that is exactly what I am seeing. Chris ___ freebsd-que

Re: NATD: net.inet.ip.fw.default_to_accept="1" vs firewall_type="OPEN"

2013-10-10 Thread Michael Ross
On Fri, 11 Oct 2013 04:38:45 +0200, Chris Stankevitz wrote: Hello, Handbook section 31.9 describes the setup of NAT. Section 31.9.3 suggests net.inet.ip.fw.default_to_accept="1" "during the first attempts to setup a firewall and NAT gateway". Section 31.9.5 suggests I "specify a predefined

Re: NATD Question

2010-08-27 Thread Nikos Vassiliadis
On 8/27/2010 9:14 PM, Michael J. Kearney wrote: Will natd forward rtmp:// ??? I am sure libalias and natd know nothing about rtmp. freebsd# cat /etc/natd.conf use_sockets redirect_port tcp 192.168.0.3:3389 10.1.10.172:3389 redirect_port tcp 192.168.0.2:1935 10.1.10.172:1935 redirect_port tc

Re: natd in 8.1

2010-05-19 Thread Casey Scott
I haven't had a chance to work on this yet. I'll be out of town for a little while, and will update the thread upon my arrival. Thanks. Casey - "Коньков Евгений" wrote: > Здравствуйте, Casey. > > What does natd with '-v' options shows? what is aliasing? > > You must bind natd to extern

Re: natd in 8.1

2010-05-18 Thread Коньков Евгений
Здравствуйте, Casey. What does natd with '-v' options shows? what is aliasing? You must bind natd to external interface NEVER DO: any to any divert!!! NOTICE: no traffice go through this rule CS> 05000 00 divert 8668 ip from any to any out via fxp0 NEVER DO: open firewall because o

Re: NATD Reverse Proxy

2008-09-25 Thread Olivier Nicole
> I'm trying to build a server that will act as a gateway between my wireless > network and the rest of the world. Here's an overview of the current setup: > > 1. FreeBSD 7.1 > 2. isc-dhcp3-server-3.0.5_2 > 3. natd configured to connect fxp0 (public network, dynamic IP) to fxp1 > (private network

Re: NATD Reverse Proxy

2008-09-25 Thread Kevin Kinsey
Tim Gustafson wrote: Hi, I'm trying to build a server that will act as a gateway between my wireless network and the rest of the world. Here's an overview of the current setup: 1. FreeBSD 7.1 2. isc-dhcp3-server-3.0.5_2 3. natd configured to connect fxp0 (public network, dynamic IP) to fxp1 (p

Re: natd / ipfw services on internal interface (Ivan Voras)

2007-09-14 Thread Joe
Joe wrote: > I have a question about natd/ and ipfw. I am running natd on my external > interface and I have some services on my internal interface. > > The services seem to be getting their ip addresses nat'd and some of them > work and some of them dont. > > Any idea how to prevent

Re: natd / ipfw services on internal interface

2007-09-10 Thread Ivan Voras
Joe wrote: I have a question about natd/ and ipfw. I am running natd on my external interface and I have some services on my internal interface. The services seem to be getting their ip addresses nat'd and some of them work and some of them dont. Any idea how to prevent things from going in

Re: Natd is not working as expected

2007-01-10 Thread Marwan Sultan
Hello Ross, FreeBSD as a gateway is very easy and simple to setup, but a very small mistake could stop your box from acting as a gateway, 1) Please send the follow : the output of #ifconfg -a 2) output of #uname -a 3) copy of rc.conf file 4) Whats the lines you have changed in your kern

Re: Natd is not working as expected

2007-01-10 Thread Lowell Gilbert
"Ross Penner" <[EMAIL PROTECTED]> writes: > I've configured my freebsd computer to be the gateway for my home network > using the guidelines in the handbook. All the required kernel options are > enabled and the entries in /etc/rc.conf have been added. I'm unsure what the > problem could be and I'

RE: natd not starting on boot-up SOLVED

2006-06-12 Thread Roger Merritt
I just cvsup'ed the source and rebuilt world, and now natd starts on boot-up just fine. I don't have any idea what changed, although I did notice that when I ran mergemaster there was new text in /etc/defaults/rc.conf, which I installed without examining too closely. The thing is, I looked it o

Re: natd not starting on boot-up

2006-06-11 Thread Roger Merritt
At 07:21 AM 6/9/2006 -0800, you wrote: On 6/6/2006 21:13, Roger Merritt seems to have typed: > Everything > starts on boot-up as it should -- except natd. I can start it manually from > the command line after booting up and logging in and it works fine, but I > can't tell what's going on that i

Re: natd not starting on boot-up

2006-06-09 Thread Peter A. Giessel
On 6/6/2006 21:13, Roger Merritt seems to have typed: > Everything > starts on boot-up as it should -- except natd. I can start it manually from > the command line after booting up and logging in and it works fine, but I > can't tell what's going on that it's failing to start. Try adding: natd_

Re: natd not starting on boot-up

2006-06-09 Thread Roger Merritt
At 02:13 PM 6/9/2006 +1000, you wrote: I've been doing a little hunting around to figure out how /etc/rc.d/natd's called in the first place and it seems this is done by the /etc/rc.d/ipfw script, which in turn is run when "firewall_enable" is set in /etc/rc.conf. /etc/rc.d/natd's not run directl

Re: natd not starting on boot-up

2006-06-08 Thread Nick Withers
On Wed, 07 Jun 2006 18:01:43 +0700 Roger Merritt <[EMAIL PROTECTED]> wrote: > At 02:12 AM 6/7/2006 -0700, you wrote: > >On 6/7/06, Nick Withers <[EMAIL PROTECTED]> wrote: > >>On Wed, 07 Jun 2006 15:23:18 +0700 > >>Roger Merritt <[EMAIL PROTECTED]> wrote: > >> > >> > At 04:35 PM 6/7/2006 +1000, you

Re: natd not starting on boot-up

2006-06-08 Thread Peter Giessel
On 6/6/2006 21:13, Roger Merritt seems to have typed: > Everything > starts on boot-up as it should -- except natd. I can start it manually from > the command line after booting up and logging in and it works fine, but I > can't tell what's going on that it's failing to start. Try adding: natd_fla

Re: natd not starting on boot-up

2006-06-07 Thread Roger Merritt
At 01:34 PM 6/7/2006 +0300, you wrote: Try to comment the line natd_enable="YES" and then add a new line at the end of rc.conf: /etc/rc.d/natd start Well, that looks like it would work. I'll keep it in mind as a last resort. if this doesn't work, try to put natd_flags="" I'll give it a tr

Re: natd not starting on boot-up

2006-06-07 Thread Roger Merritt
At 02:12 AM 6/7/2006 -0700, you wrote: On 6/7/06, Nick Withers <[EMAIL PROTECTED]> wrote: On Wed, 07 Jun 2006 15:23:18 +0700 Roger Merritt <[EMAIL PROTECTED]> wrote: > At 04:35 PM 6/7/2006 +1000, you wrote: > >On Wed, 07 Jun 2006 12:13:29 +0700 > >Roger Merritt <[EMAIL PROTECTED]> wrote: > > >

Re: natd not starting on boot-up

2006-06-07 Thread Panagiotis
Roger Merritt wrote: I'm thoroughly puzzled. Over the weekend I transferred my FreeBSD system to a new hard drive. Through laziness I didn't follow the instructions and had to make a completely new install. Everything now seems to be working the way it should, Apache, MySQL

Re: natd not starting on boot-up

2006-06-07 Thread Panagiotis
Roger Merritt wrote: I'm thoroughly puzzled. Over the weekend I transferred my FreeBSD system to a new hard drive. Through laziness I didn't follow the instructions and had to make a completely new install. Everything now seems to be working the way it should, Apache, MySQL, PHP, syslog, Samb

Re: natd not starting on boot-up

2006-06-07 Thread Derrick Ryalls
On 6/7/06, Nick Withers <[EMAIL PROTECTED]> wrote: On Wed, 07 Jun 2006 15:23:18 +0700 Roger Merritt <[EMAIL PROTECTED]> wrote: > At 04:35 PM 6/7/2006 +1000, you wrote: > >On Wed, 07 Jun 2006 12:13:29 +0700 > >Roger Merritt <[EMAIL PROTECTED]> wrote: > > > > > I'm thoroughly puzzled. Over the wee

Re: natd not starting on boot-up

2006-06-07 Thread Nick Withers
On Wed, 07 Jun 2006 15:23:18 +0700 Roger Merritt <[EMAIL PROTECTED]> wrote: > At 04:35 PM 6/7/2006 +1000, you wrote: > >On Wed, 07 Jun 2006 12:13:29 +0700 > >Roger Merritt <[EMAIL PROTECTED]> wrote: > > > > > I'm thoroughly puzzled. Over the weekend I transferred my FreeBSD > > system to > > > a

Re: natd not starting on boot-up

2006-06-07 Thread Roger Merritt
At 04:35 PM 6/7/2006 +1000, you wrote: On Wed, 07 Jun 2006 12:13:29 +0700 Roger Merritt <[EMAIL PROTECTED]> wrote: > I'm thoroughly puzzled. Over the weekend I transferred my FreeBSD system to > a new hard drive. Through laziness I didn't follow the instructions and had > to make a completely

Re: natd not starting on boot-up

2006-06-07 Thread Roger Merritt
At 08:46 AM 6/7/2006 +0200, you wrote: Hello Roger, what happens if you type /etc/rc.d/natd start after boot-up? The script prints out the string " natd", leading space but no newline, and a process is started for natd. -- Roger ___ freebsd

Re: natd not starting on boot-up

2006-06-07 Thread Björn König
Hello Roger, what happens if you type /etc/rc.d/natd start after boot-up? Björn ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: natd not starting on boot-up

2006-06-06 Thread Nick Withers
On Wed, 07 Jun 2006 12:13:29 +0700 Roger Merritt <[EMAIL PROTECTED]> wrote: > I'm thoroughly puzzled. Over the weekend I transferred my FreeBSD system to > a new hard drive. Through laziness I didn't follow the instructions and had > to make a completely new install. Everything now seems to be w

Re: Natd with Multiple DSL Connections

2006-03-15 Thread Chuck Swiger
Iantcho Vassilev wrote: > On 3/12/06, Nagilum <[EMAIL PROTECTED]> wrote: [ ... ] > I checked the man page but really didn`t understand - it will forward the > traffic simultaneously threw two interfaces ? Based on IP? No, you would use IPFW to forward different IP ranges through one interface or

Re: Natd with Multiple DSL Connections

2006-03-15 Thread Iantcho Vassilev
On 3/12/06, Nagilum <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: RIPEMD160 > > How about interface bonding/aggregation ? Check ng_fec(4) for details. > Hope this helps, > Nagilum. I checked the man page but really didn`t understand - it will forward the traffic simu

Re: Natd with Multiple DSL Connections

2006-03-12 Thread Nagilum
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 How about interface bonding/aggregation ? Check ng_fec(4) for details. Hope this helps, Nagilum. Ramiz Sardar wrote: > Dears, I am using freebsd machine in office as a gateway and using > ipfw+natd for internet sharing. I have two dsl connection

Re: natd with several alias IPs

2006-02-16 Thread Iantcho Vassilev
That`s how i do it with PF!!! nat on ed0 proto {tcp udp icmp} from 10.10.xx.xx to any -> 172.16.xx.xx # Rule 2 (NAT) # # nat on ed0 proto {tcp udp icmp} from 10.10.xx.xx to any -> 172.16.xx.xx # # Rule 3 (NAT) # # nat on ed0 proto {tcp udp icmp} from 10.10.xx.xx to any -> 172.16.xx.xx # # Ru

Re: natd with several alias IPs

2006-02-16 Thread Andrew Pantyukhin
On 2/16/06, Chuck Swiger <[EMAIL PROTECTED]> wrote: > Andrew Pantyukhin wrote: > > I wonder, what tricks do you use to use more than > > one alias IP? I mean, if you have hundreds of > > hosts behind your firewall, what can you do to alias > > some of them to one ip, others to another and so on. >

Re: natd with several alias IPs

2006-02-15 Thread Chuck Swiger
Andrew Pantyukhin wrote: > I wonder, what tricks do you use to use more than > one alias IP? I mean, if you have hundreds of > hosts behind your firewall, what can you do to alias > some of them to one ip, others to another and so on. See "man natd" about the following options for 1-to-1 NAT trans

Re: natd with several alias IPs

2006-02-15 Thread Andrew Pantyukhin
On 2/16/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > I am not a ipfw expert. The truth of it is I was a ipfw user before > I added a LAN behind my gateway box. Ipfw does it's nating from > within ipfw and that it what makes ipfw nating so hard to get right. > It's even harder if you use keep

RE: natd with several alias IPs

2006-02-15 Thread bob
eeBSD Questions Subject: Re: natd with several alias IPs On 2/16/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > I am not sure just what you are asking about. > > Are you saying that you have 4 static public ip address assigned to > you by your ISP and you want to round robin t

Re: natd with several alias IPs

2006-02-15 Thread Andrew Pantyukhin
On 2/16/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > I am not sure just what you are asking about. > > Are you saying that you have 4 static public ip address assigned to > you by your ISP and you want to round robin those 4 in the NATing > process to your hundreds of LAN users? > > If that's

RE: natd with several alias IPs

2006-02-15 Thread bob
I am not sure just what you are asking about. Are you saying that you have 4 static public ip address assigned to you by your ISP and you want to round robin those 4 in the NATing process to your hundreds of LAN users? If that's what you are after then any of FreeBSD's 3 built in firewall can do

Re: natd & auth requests

2006-02-10 Thread Wojciech Puchar
number or DNS reverse name or maybe from table like oidentd? How about running oidentd, if you already know it does what you'd like? It's in ports. well that's what i needed. ___ "oidentd is an ident (rfc1413 compliant) daemon that runs on Linux,

Re: natd & auth requests

2006-02-10 Thread Wojciech Puchar
connections handled by natd? like answering last byte of source IP number or DNS reverse name or maybe from table like oidentd? How about running oidentd, if you already know it does what you'd like? It's in ports. well that's what i needed. ___ free

Re: natd & auth requests

2006-02-10 Thread Wojciech Puchar
handled by natd? like answering last byte of source IP number or DNS reverse name or maybe from table like oidentd? If you're using 1-to-1 NAT forwarding, run identd or the inetd-based version on the internal hosts you're forwarding to. If you're using NAT to only forward individual ports to sp

Re: natd & auth requests

2006-02-10 Thread Lowell Gilbert
Wojciech Puchar <[EMAIL PROTECTED]> writes: > how can i make ident service to make informative answers for > connections handled by natd? like answering last byte of source IP > number or DNS reverse name or maybe from table like oidentd? How about running oidentd, if you already know it does wha

Re: natd & auth requests

2006-02-10 Thread Chuck Swiger
Wojciech Puchar wrote: > how can i make ident service to make informative answers for connections > handled by natd? like answering last byte of source IP number or DNS > reverse name or maybe from table like oidentd? If you're using 1-to-1 NAT forwarding, run identd or the inetd-based version on

Re: natd -redirect_port question

2006-01-01 Thread Matt Emmerton
> I have natd set up on a 4.10 box to get the rest of my network on the > internet. I have an application that requires connections to be able to > be established on a specific port. The problem is, sometimes I run this > app on system A and sometimes on system B. The port stays the same. So > in m

RE: NATD Internal Network problems

2005-12-30 Thread Ted Mittelstaedt
>-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] Behalf Of Chris S. Wilson >Sent: Thursday, December 29, 2005 3:08 PM >To: Greg Barniskis >Cc: freebsd-questions >Subject: RE: NATD Internal Network problems > > >Weird, every other rou

Re: NATD Internal Network problems

2005-12-29 Thread Greg Barniskis
Chris S. Wilson wrote: Weird, every other router I've used forwards all the packets properly, even my backup linksys when I hook it up. Probably works there because there's not a very complex packet filtering operation in the middle when using an off-the-shelf router. Keep in mind that I'm s

RE: NATD Internal Network problems

2005-12-29 Thread Chris S. Wilson
al Message- From: Greg Barniskis [mailto:[EMAIL PROTECTED] Sent: Thursday, December 29, 2005 3:05 PM To: Chris S. Wilson Cc: freebsd-questions Subject: Re: NATD Internal Network problems Chris S. Wilson wrote: > Hello! :) > > I am having a problem with freebsd 5.3-release and natd.

Re: NATD Internal Network problems

2005-12-29 Thread Greg Barniskis
Chris S. Wilson wrote: Hello! :) I am having a problem with freebsd 5.3-release and natd. When I try to connect to a service on my internal network to an IP on my external network that has a port redirected, it wont connect. IE: 67.128.100.2 is my external IP, on my internal network I try to

RE: NATD Internal Network problems

2005-12-29 Thread Chris S. Wilson
on Cc: freebsd-questions@freebsd.org Subject: Re: NATD Internal Network problems Chris S. Wilson wrote: > Hmm, still does'nt work. > > That seemed to be a typo however I still cant connect :( Does "telnet 10.0.10.2 80" from the firewall box work? Does normal NAT work OK (ie,

Re: NATD Internal Network problems

2005-12-29 Thread Chuck Swiger
Chris S. Wilson wrote: Hmm, still does'nt work. That seemed to be a typo however I still cant connect :( Does "telnet 10.0.10.2 80" from the firewall box work? Does normal NAT work OK (ie, can internal machines connect outside)? Does not using the external IP help: redirect_port tcp 1

RE: NATD Internal Network problems

2005-12-29 Thread Chris S. Wilson
Hmm, still does'nt work. That seemed to be a typo however I still cant connect :( CW -Original Message- From: Chuck Swiger [mailto:[EMAIL PROTECTED] Sent: Thursday, December 29, 2005 12:42 PM To: Chris S. Wilson Cc: freebsd-questions@freebsd.org Subject: Re: NATD Internal Ne

Re: NATD Internal Network problems

2005-12-29 Thread Chuck Swiger
Chris S. Wilson wrote: [ ... ] IE: 67.128.100.2 is my external IP, on my internal network I try to connect to 67.128.101.2:80 which is forwarded in my natd.conf and the connection is refused. Does anyone know why? Change the "-" to a "0" in: redirect_port tcp 10.0.10.2:8- 67.128.100.2:80

Re: natd redirect help

2005-10-21 Thread Lowell Gilbert
"Efren Bravo" <[EMAIL PROTECTED]> writes: > Hi, > > I've a freebsd5.4 with ipfw and natd. I need that external users can enter > to my internal network services (http, ftp, etc). > > freebsd box: > out interface: 200.x.x.x > in interface: 10.x.x.x > > /etc/rc.conf file: > -- >

Re: natd redirect help

2005-10-20 Thread guru
El día Thursday, October 20, 2005 a las 02:19:55PM -0500, Efren Bravo escribió: > Hi, > > I've a freebsd5.4 with ipfw and natd. I need that external users can enter > to my internal network services (http, ftp, etc). > > freebsd box: > out interface: 200.x.x.x > in interface: 10.x.x.x > > /etc

RE: NATD server problem on 5.3 ?

2005-04-19 Thread Ed Stover
And I would like to add these questions to On Tue, 2005-04-19 at 07:44 -0400, [EMAIL PROTECTED] wrote: > Saying it's not working is way to vague. > You need to post more details about what is not working. > Like can the 5.3 server ping the public internet? > Can it ping PCs on the LAN? > Can a win

RE: NATD server problem on 5.3 ?

2005-04-19 Thread bob
Saying it's not working is way to vague. You need to post more details about what is not working. Like can the 5.3 server ping the public internet? Can it ping PCs on the LAN? Can a win LAN PC ping the server? What does the firewall log contain? Have you tested with firewall out of the way by havin

Re: NATD server problem on 5.3 ?

2005-04-19 Thread Kees Plonsz
faisal gillani wrote on Tuesday 19 April 2005 10:08 in the group list.freebsd.questions: > Well i recently installed my first natd server on > freebsd 5.3, but its not working ? > > here is wat i did .. > > 1. compiles kernal with the following options > > options IPFIREWALL > options IPV6FIR

Re: natd, ipfw problem

2005-03-04 Thread Ean Kingston
It's been a while but I'll see if I can help out. On Friday, March 4, 2005, at 06:52 PM, Florian Hengstberger wrote: Hi! Tell me if I should post this otherwhere. Given two network cards sis0 (external) and vr0 (internal) I'm trying to give my girlfriend access to the web. Her ip is 192.168.0.2, I

RE: natd or firewall problem?

2005-02-06 Thread Gelsema, Patrick
> To: Gelsema, Patrick > Cc: 'Cristian Salan'; 'Gelsema, Patrick'; > freebsd-questions@freebsd.org > Subject: Re: natd or firewall problem? > > > Gelsema, Patrick wrote: > > Thats right, you can do the following: > > Put the ip-address with its FQDn

Re: natd or firewall problem?

2005-02-05 Thread Chris Hodgins
Gelsema, Patrick wrote: Thats right, you can do the following: Put the ip-address with its FQDn (www.webserverwhatever.com) in every hosts file (taken its windows) or in its hosts file on freebsd. Or you run an internal DNS with an internal zone for your domain whilst running on the internet the ex

Re: natd or firewall problem?

2005-02-05 Thread Cristian Salan
On Sat, 5 Feb 2005 13:54:23 +0100, Gelsema, Patrick <[EMAIL PROTECTED]> wrote: > Thats right, you can do the following: > Put the ip-address with its FQDn (www.webserverwhatever.com) in every hosts > file (taken its windows) or in its hosts file on freebsd. Or you run an > internal DNS with an inte

RE: natd or firewall problem?

2005-02-05 Thread Gelsema, Patrick
, Patrick > -Original Message- > From: Cristian Salan [mailto:[EMAIL PROTECTED] > Sent: Saturday, February 05, 2005 1:51 PM > To: Gelsema, Patrick > Cc: freebsd-questions@freebsd.org > Subject: Re: natd or firewall problem? > > > > > Hello dear list, >

Re: natd or firewall problem?

2005-02-05 Thread Cristian Salan
> > Hello dear list, > > > > I have one FreeBSD router in front of the internal network. Now I've > > installed another FreeBSD box which must be the www sever. > > I've managed to redirect the port 80 at the router and the web server > > is visible to the outside world. But the problem is now at t

Re: natd or firewall problem?

2005-02-05 Thread Gelsema, Patrick
Hi, IN order to enlighten you we need some more information. Sounds to me you could be having issues with internal/external DNS and ip-addresses. In other words, you are querying your www server from a dns and is getting the Internet ip back instead of the lan ip. Can you connect to your www serve

Re: Natd manpage interpretation problem . . .

2004-11-20 Thread Matt Emmerton
> I know similar questions have been asked in the past, and I'm sure the > natd manpage has it described quite clearly, but I just can't seem to > figure this out. > > I'm trying to automagically route all udp ports above 1023 coming from > a network block to a machine on the internal network. > >

Re: Natd/Gateway=yes vs 5.3

2004-11-14 Thread Francisco Reyes
On Sun, 14 Nov 2004, John Murphy wrote: Section 14.9.6.3 /etc/rc.conf Options says: If you don't have IPFW compiled into your kernel you will need to load it with the following statement in your /etc/rc.conf: firewall_enable="YES" I eventually figured it out.. after HOURS of checking around. I did

Re: Natd/Gateway=yes vs 5.3

2004-11-14 Thread John Murphy
Francisco Reyes wrote: >Migrating a 4.10 box. >Copied data to a second drive. >Installed 5.3 >Changed kernel to add > >options IPFIREWALL >options IPFIREWALL_VERBOSE >options "IPFIREWALL_VERBOSE_LIMIT"=50 >options IPDIVERT > >In /etc/rc.conf have >firewall_enable="Y

Re: nATd

2004-11-01 Thread Michael C. Shultz
On Monday 01 November 2004 09:28 pm, sonjaya wrote: > Dear all > > i ussually use iptables for NAT in my linux box , but > in freebsd i newbies , how to configure freebsd be NAT > server , i search i get 3 option : > 1.use ipfw > 2.use NATD > 3.use ipnat > > how to use that all with whis network :

Re: natd not doing anything

2004-09-29 Thread Micheal Patterson
- Original Message - From: "Alex de Kruijff" <[EMAIL PROTECTED]> To: "Micheal Patterson" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Wednesday, September 29, 2004 10:51 AM Subject: Re: n

Re: natd not doing anything

2004-09-29 Thread Alex de Kruijff
On Wed, Sep 29, 2004 at 10:33:13AM -0500, Micheal Patterson wrote: > From: "Alex de Kruijff" <[EMAIL PROTECTED]> > > I changed the list from current@ to questions@, since you question is > > not only for CURRENT. > > > > On Tue, Sep 28, 2004 at 09:11:39PM +1000, Rebecca Dridan wrote: > > > Hi all:

Re: natd not doing anything

2004-09-29 Thread Micheal Patterson
- Original Message - From: "Alex de Kruijff" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Wednesday, September 29, 2004 10:05 AM Subject: Re: natd not doing anything > I changed the list f

Re: natd not doing anything

2004-09-29 Thread Alex de Kruijff
I changed the list from current@ to questions@, since you question is not only for CURRENT. On Tue, Sep 28, 2004 at 09:11:39PM +1000, Rebecca Dridan wrote: > Hi all: > > I am having some issues with network set-up. I'm running CURRENT as of > 26th September, with an ipfw firewall and natd. I have

Re: natd -redirect_address

2004-08-05 Thread Steve Bertrand
>> Hello all, >> >> I am probably missing something really stupid but here it goes. >> I've >> read the man pages, the handbook and even googled the problem to no >> avail. >> >> I am trying to set up natd to redirect public ips to my private >> addresses. >> >> This is what I have set up in rc.con

Re: natd -redirect_address

2004-08-05 Thread Steve Bertrand
> Hello all, > > I am probably missing something really stupid but here it goes. I've > read the man pages, the handbook and even googled the problem to no > avail. > > I am trying to set up natd to redirect public ips to my private > addresses. > > This is what I have set up in rc.conf > > defaul

[Fwd: Re: natd -redirect_address]

2004-08-05 Thread Steve Bertrand
OP forgot to Cc: list... thank you so much. I found that for some reason natd was not loading at boot so I typed this ipfw -f flush ipfw add divert natd all from any to any via xl0 ipfw add pass all from any to any natd -n xl0 -redirect_address 192.168.0.10 24.97.250.203 and it works like a dream

Re: NATD Port Forwarding question

2004-07-04 Thread andrew clarke
On Sun, Jul 04, 2004 at 06:57:16PM +1000, Jon Kurjakovich wrote: > My problem: I am trying to use NATD to forward packets to machines on > the internal network using the redirect_port command. I don't have a solution to your problem with natd, however net/rinetd (from ports) might be a good enoug

RE: NATD Port Forwarding question

2004-07-04 Thread Jon Kurjakovich
lp is greatly appreciated. Rgds, Jon -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Micheal Patterson Sent: Sunday, 4 July 2004 8:12 PM To: Jon Kurjakovich; [EMAIL PROTECTED] Subject: Re: NATD Port Forwarding question Is the system configured to accept r

Re: NATD Port Forwarding question

2004-07-04 Thread Micheal Patterson
Is the system configured to accept remote desktop requests? Windows XP has it disabled by default. -- Micheal Patterson TSG Network Administration 405-917-0600 Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contai

Re: natd firewall settings for vpn

2004-06-18 Thread Michael W. Oliver
On 2004-06-18T14:46:31-0500, Jim Freeze wrote: > mike oliver wrote: > > The trick here with NAT is that AH will build a checksum of the IP > > header, which includes the private IP address of your laptop. Since NAT > > changes this IP address, the destination will dump the packet since the > > AH

Re: natd firewall settings for vpn

2004-06-18 Thread Jim Freeze
> Protocol 50 is ESP, or encapsulating security payload > Protocol 51 is AH, or authentication header > Ok, thanks. > The trick here with NAT is that AH will build a checksum of the IP > header, which includes the private IP address of your laptop. Since NAT > changes this IP address, the desti

Re: natd firewall settings for vpn

2004-06-18 Thread Michael W. Oliver
On 2004-06-18T00:11:03-0500, Jim Freeze wrote: > Hi > > I am trying to configure my firewall to allow packets through > for a VPN connection. I am running FBSD 5.2 as my router and am trying > to connect my laptop from behind the router to our work computer. > > The laptop is running OSX 10.3.4 w

Re: natd firewall settings for vpn

2004-06-18 Thread Bill Moran
Jim Freeze <[EMAIL PROTECTED]> wrote: > I am trying to configure my firewall to allow packets through > for a VPN connection. I am running FBSD 5.2 as my router and am trying > to connect my laptop from behind the router to our work computer. > > The laptop is running OSX 10.3.4 with a Nortel Netw

Re: natd, ipfw and MS netmeeting

2004-06-04 Thread Christoph P. Kukulies
On Fri, Jun 04, 2004 at 07:37:15AM +0800, Khairil Yusof wrote: > On Thu, 2004-06-03 at 11:26 +0200, Christoph Kukulies wrote: > > > Anyway, the prsent (simple) natd rules don't seem to suffice. > > If I'm not wrong, ms netmeeting and msn messenger (audio,video) do not > work over nat. There are s

Re: natd, ipfw and MS netmeeting

2004-06-03 Thread Christian Hiris
On Thursday 03 June 2004 11:26, Christoph Kukulies wrote: > I have problems getting a MC netmeeting seession established > across a FreeBSD gateway (5.2-current). > > Anyway, the prsent (simple) natd rules don't seem to suffice. > In most cases you want to use username to ip mapping and a proxy, i

Re: natd, ipfw and MS netmeeting

2004-06-03 Thread Khairil Yusof
On Thu, 2004-06-03 at 11:26 +0200, Christoph Kukulies wrote: > Anyway, the prsent (simple) natd rules don't seem to suffice. If I'm not wrong, ms netmeeting and msn messenger (audio,video) do not work over nat. There are some third party windows utilities available to enable this to work. I have

RE: natd -redirect_port

2004-05-17 Thread JJB
PROTECTED] Sent: Monday, May 17, 2004 8:32 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Cc: Micheal Patterson; Anthony Philipp Subject: Re: natd -redirect_port On Saturday 15 May 2004 18:56, JJB wrote: > You are wrong also. The boot time message that displays about the > ipfw module being loaded

Re: natd -redirect_port

2004-05-17 Thread Christian Hiris
ailto:[EMAIL PROTECTED] > Sent: Saturday, May 15, 2004 11:38 AM > To: [EMAIL PROTECTED]; Christian Hiris; > [EMAIL PROTECTED] > Cc: Anthony Philipp > Subject: Re: natd -redirect_port > > > - Original Message - > From: "JJB" <[EMAIL PROTECTED]> > To: &q

RE: natd -redirect_port

2004-05-15 Thread JJB
D] Sent: Saturday, May 15, 2004 11:38 AM To: [EMAIL PROTECTED]; Christian Hiris; [EMAIL PROTECTED] Cc: Anthony Philipp Subject: Re: natd -redirect_port - Original Message - From: "JJB" <[EMAIL PROTECTED]> To: "Christian Hiris" <[EMAIL PROTECTED]>; <[EMAI

Re: natd -redirect_port

2004-05-15 Thread Micheal Patterson
- Original Message - From: "JJB" <[EMAIL PROTECTED]> To: "Christian Hiris" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Cc: "Anthony Philipp" <[EMAIL PROTECTED]> Sent: Saturday, May 15, 2004 8:05 AM Subject: RE: natd -redirect_port

RE: natd -redirect_port

2004-05-15 Thread JJB
f" -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Christian Hiris Sent: Saturday, May 15, 2004 3:06 AM To: [EMAIL PROTECTED] Cc: Anthony Philipp Subject: Re: natd -redirect_port On Saturday 15 May 2004 07:49, Anthony Philipp wrote: > hello, > im

Re: natd -redirect_port

2004-05-15 Thread Christian Hiris
On Saturday 15 May 2004 07:49, Anthony Philipp wrote: > hello, > im am trying to redirect various ports through my gateway, a freebsd > machine, to other machines. when i type: natd -interface rl0 -redirect_port > tcp 10.10.10.4:25 25 > to redirect port 25 to 10.10.10.4 on port 25 it tells me > nat

Re: Natd and natd_interface

2004-04-09 Thread Arek Czereszewski
Rob wrote: fxp0, the one that connects to the outside network. Yes. It is. I don't think you have to do this yourself. I believe by adding natd_enable="YES" Yes, i have this. And gateway_enable, firewall_enable, firewall_type to your rc.conf, you get the following rule as a result: divert

Re: Natd and natd_interface

2004-04-09 Thread Rob
Arek Czereszewski wrote: Hi I have configuration like this: Intrenet - fxp0 (public IP) [freebsd box] - fxp1 (public IP) class /28 and some workstatins connected, mail daemon, www and others

Re: NATd error Message

2004-03-25 Thread Kevin D. Kinsey, DaleCo, S.P.
JP wrote: --- "Kevin D. Kinsey, DaleCo, S.P." <[EMAIL PROTECTED]> wrote: JP wrote: Hey Gang-- I recompiled my kernel to include support for firewall and such. OK, we kinda know what you mean. So I'll kinda give you an answer. You kinda did something wrong ;-) Se

Re: NATd error Message

2004-03-25 Thread JP
*grin* I added the following to my kernel: options IPFIREWALL options IPFIREWALL_VERBOSE options IPFIREWALL_VERBOSE_LIMIT=100 options IPDIVERT --- "Kevin D. Kinsey, DaleCo, S.P." <[EMAIL PROTECTED]> wrote: > JP wrote: > > >Hey Gang-- > > > >I recompiled my kernel to include support for > firewa

Re: NATd error Message

2004-03-25 Thread Kevin D. Kinsey, DaleCo, S.P.
JP wrote: Hey Gang-- I recompiled my kernel to include support for firewall and such. OK, we kinda know what you mean. So I'll kinda give you an answer. You kinda did something wrong ;-) Seriously, exactly what did you add to your kernel config? After creating my rules file, fwrules and r

Re: natd + ipfw - very slow internet for LAN users

2004-03-12 Thread Kenneth Culver
o any keep-state via ${iif} Btw, i have a static internet ip address, not the dynamic. I have read the man ipfw BUGS section, but still I can't understand, how can i solve my problem. - Original Message - From: "jon" <[EMAIL PROTECTED]> To: "Prodigy" <[EMAIL

Re: natd + ipfw - very slow internet for LAN users

2004-03-12 Thread Prodigy
tate via ${iif} Btw, i have a static internet ip address, not the dynamic. I have read the man ipfw BUGS section, but still I can't understand, how can i solve my problem. - Original Message - From: "jon" <[EMAIL PROTECTED]> To: "Prodigy" <[EMAIL PROTECTED]&

Re: natd + ipfw - very slow internet for LAN users

2004-03-10 Thread Prodigy
> Ping to an ip address does not use DNS. > What is response time when you use ping domain name? It's ~250ms for google.com and other domains (good enough too). > I see you have forced ip address for your nic card connected to the > public internet by using rc.conf statement. > This looks wrong to

Re: natd question

2004-02-05 Thread HOLLOW, CHRISTOPHER
Multihome your FBSD box. Assign your outside nic the external ip, inside nic your local subnet dg. Configure natd. http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-natd.html Does FreeBSD still ship with ipnat? Or is natd the only nat'ing service? Chris Markus Kovero wrote:

Re: natd

2004-01-28 Thread Peter Rosa
ot;JJB" <[EMAIL PROTECTED]> To: "Peter Rosa" <[EMAIL PROTECTED]> Sent: Wednesday, January 28, 2004 2:03 PM Subject: RE: natd > Are you saying you have 2 separate Nic connections to the public > internet, each one being assigned an different > dynamic IP address by

  1   2   >