ipfw + natd + stateful

[Adrian Penisoara]

Hi,

On 9/25/07, afsin cakir <afsincakir at hotmail.com> wrote:
>
>
>
> I'm using 6,2 Relase with working caching only dns server. I'm testing
> ipfw for learning. this is my ipfw rules. I have a problem this config.
> I can browse internet but I can't login to hotmail.the page not
> displaying.


You should get hold of tcpdump and try getting a dump analysis on your
public interface to see what kind of (weird) packets you are seeing from
hotmail.com.
Also since you have "log" statements on your deny rules, make sure that the
"net.inet.ip.fw.verbose" sysctl is set to 1 and check the syslogs for
possibly problematic dropped packets.

Regards,
Adrian Penisoara.