Gateway problemas
Mike Maltese
mike at pcmedx.com
Fri Aug 15 17:36:18 PDT 2003
> block in log all
> block out log all
You don't need these since you used IPFITLER_DEFAULT_BLOCK (per your last
message). If you want to log blocked traffic, add
block in log quick on ep1 all
at the end of your rules for that interface.
You may want to try setting all interfaces to pass in/out quick until you
achieve connectivity.
> hostname=""
> ifconfig_rl0="DHCP"
> ifconfig_rl1="192.168.0.0"
> kern_securelevel_enable="NO"
> sendmail_enable="NONE"
> sshd_enable="YES"
> usbd_enable="YES"
> inetd_enable="NO"
> portmap_enable="NO"
> ipfilter_enable="YES"
> ipfilter_rules="/etc/ipf.rules"
> ipnat_enable="YES"
> ipnat_rules="/etc/ipf.rules"
> ipmon_enable="YES"
> ipmon_flags="-Dsn"
You're missing gateway_enable="YES". Do a sysctl net.inet.ip.forwarding to
ensure that this sysctl is indeed set to 1. Then you don't need the entry is
sysctl.conf.
More information about the freebsd-questions
mailing list