Ry pinging from the wan in the pfsense gui to the next hop maybe you have a cable wrong or something else silly that we all do sometimes
-----Original Message----- From: Eric W. Bates [mailto:[EMAIL PROTECTED] Sent: 10 April 2006 22:31 To: [email protected] Subject: [pfSense Support] dumb routing question -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 My pfsense box does not seem willing to forward any packets. Pretty much factory default. It has a non-routable subnet (10.128.10.1/24) on the LAN, and a legit IP on the WAN. I presume NAT is configured; but unless I turn on advanced NAT, I don't think I can see to confirm? The pfsense box has full connectivity/routing out. But if I merely try to ping the very next hop from a machine on the LAN, the pfsense box reports an ICMP unreachable. tcpdump attached to the WAN interface doesn't see anything (i.e. the pfsense machine is not forwarding the packets to the WAN interface, just bouncing them from the LAN interface). sysctl reports that forwarding is on: net.inet.ip.forwarding: 1 net.inet.ip.fastforwarding: 1 The firewall log does not report that anything is being blocked (default rule of allowing everything from the LAN side is in place). How do I look to see what the NAT config is? I can't think why else stuff is not working. Thanks. - -- Eric W. Bates [EMAIL PROTECTED] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFEOs6fD1roJTQ4LlERAkKAAJ9PIxiE483ai7eJ6MfYqbrABw68sQCeM6M0 2AmD8yGqNlKxy3OQcu7zU6E= =PTa5 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
