Re: help with source-routing

2006-03-04 Thread Joachim Schipper
On Fri, Mar 03, 2006 at 06:14:00PM +0100, oliver simon wrote: Still no success ... On the next firewall, tcpdump only shows the private IP-Address from the bsd-machine, trying to connect the outer world ... 17:51:38.109862 10.50.0.10.47888 83.146.78.121.ssh: S 3774377327:3774377327(0)

help with source-routing

2006-03-03 Thread oliver simon
hi bsd-gurus ... we are currently trying to set up an openbsd host, and have a problem with source-routing mechanisms !? Setup is as following: (all IP4s examples) hme1 - 10.50.0.10 hme0 - 217.5.23.69 hme0_alias - 217.5.23.70 default-gw is 10.50.0.1 If you want to connect to e.g.

Re: help with source-routing

2006-03-03 Thread Joachim Schipper
On Fri, Mar 03, 2006 at 01:08:43PM +0100, oliver simon wrote: hi bsd-gurus ... we are currently trying to set up an openbsd host, and have a problem with source-routing mechanisms !? Setup is as following: (all IP4s examples) hme1 - 10.50.0.10 hme0 - 217.5.23.69 hme0_alias -

Re: help with source-routing

2006-03-03 Thread Stuart Henderson
On 2006/03/03 13:08, oliver simon wrote: we are currently trying to set up an openbsd host, and have a problem with source-routing mechanisms !? PF route-to/reply-to options will ensure the packets are sent out the correct interface, then you can either setup your software to bind to the right

Re: help with source-routing

2006-03-03 Thread Alexander Bochmann
Hi, ...on Fri, Mar 03, 2006 at 01:08:43PM +0100, oliver simon wrote: hme1 - 10.50.0.10 hme0 - 217.5.23.69 hme0_alias - 217.5.23.70 default-gw is 10.50.0.1 If you want to connect to e.g. 193.44.25.2, the machine has to go there with one of it4s official IPs 217... Are you shure

Re: help with source-routing

2006-03-03 Thread oliver simon
Hi Joachim, thanks for helping ... here4s the requested ... [EMAIL PROTECTED] ~ # route -n show Routing tables Internet: DestinationGatewayFlagsRefs UseMtu Interface default10.50.0.1 UGS 0 2796 - hme1 10.32.0/24

Re: help with source-routing

2006-03-03 Thread oliver simon
Hi Alex, Alexander Bochmann wrote: Hi, ...on Fri, Mar 03, 2006 at 01:08:43PM +0100, oliver simon wrote: hme1 - 10.50.0.10 hme0 - 217.5.23.69 hme0_alias - 217.5.23.70 default-gw is 10.50.0.1 If you want to connect to e.g. 193.44.25.2, the machine has to go there with one of

Re: help with source-routing

2006-03-03 Thread Joachim Schipper
On Fri, Mar 03, 2006 at 02:01:22PM +0100, oliver simon wrote: Hi Alex, Alexander Bochmann wrote: Hi, ...on Fri, Mar 03, 2006 at 01:08:43PM +0100, oliver simon wrote: hme1 - 10.50.0.10 hme0 - 217.5.23.69 hme0_alias - 217.5.23.70 default-gw is 10.50.0.1 If you want

Re: help with source-routing

2006-03-03 Thread oliver simon
Hi again .. ;-) Joachim Schipper wrote: On Fri, Mar 03, 2006 at 02:01:22PM +0100, oliver simon wrote: Hi Alex, Alexander Bochmann wrote: Hi, ...on Fri, Mar 03, 2006 at 01:08:43PM +0100, oliver simon wrote: hme1 - 10.50.0.10 hme0 - 217.5.23.69 hme0_alias - 217.5.23.70 default-gw is

Re: help with source-routing

2006-03-03 Thread oliver simon
Does not work ... After putting your lines in pf.conf, it just puts out a syntax error !? oliver simon wrote: Hi again .. ;-) Joachim Schipper wrote: On Fri, Mar 03, 2006 at 02:01:22PM +0100, oliver simon wrote: Hi Alex, Alexander Bochmann wrote: Hi, ...on Fri, Mar 03, 2006 at 01:08:43PM

Re: help with source-routing

2006-03-03 Thread Joachim Schipper
On Fri, Mar 03, 2006 at 03:03:23PM +0100, oliver simon wrote: Hi again .. ;-) Joachim Schipper wrote: On Fri, Mar 03, 2006 at 02:01:22PM +0100, oliver simon wrote: Hi Alex, Alexander Bochmann wrote: Hi, ...on Fri, Mar 03, 2006 at 01:08:43PM +0100, oliver simon wrote: hme1 -

Re: help with source-routing

2006-03-03 Thread Alexander Bochmann
...on Fri, Mar 03, 2006 at 03:03:23PM +0100, oliver simon wrote: Internal Network is another IP-Range ... DMZ has official IPs for the services and its private ip-range for the hosts themself. DMZ: 10.50.0.0/24 + Official IPs for services Internal(!)Lan: 10.23.0.0/24 DBNet (e.g.):

Re: help with source-routing

2006-03-03 Thread oliver simon
Still no success ... On the next firewall, tcpdump only shows the private IP-Address from the bsd-machine, trying to connect the outer world ... 17:51:38.109862 10.50.0.10.47888 83.146.78.121.ssh: S 3774377327:3774377327(0) win 16384 mss 1460,nop,nop,sackOK,nop,wscale 0,nop,nop,timestamp