Help with FreeBSD Bridged Firewall

William Knechtel wknechtel at psi-np.org
Tue Jul 29 16:05:41 PDT 2003


It is directly behind the router, but does not have a viable routable IP
on it.  Only the private IP on the internal card.  

Thanks,
Bill

-----Original Message-----
From: owner-freebsd-questions at freebsd.org
[mailto:owner-freebsd-questions at freebsd.org] On Behalf Of Micheal
Patterson
Sent: Tuesday, July 29, 2003 5:03 PM
To: William Knechtel; freebsd-questions at freebsd.org
Subject: Re: Help with FreeBSD Bridged Firewall


----- Original Message ----- 
From: "William Knechtel" <wknechtel at psi-np.org>
To: <freebsd-questions at freebsd.org>
Sent: Tuesday, July 29, 2003 5:26 PM
Subject: Help with FreeBSD Bridged Firewall


> Hello!
>
> Help!! I'm running a PC with dual NICs and FreeBSD 4.8 as a bridged
> firewall. I've got a private IP 10.0.0.1 tied to the internal card on
> the
> box for remote management. The firewall blocks any 10.x traffic coming
> in on
> the external card, so to remotely admin it, I have to shell into a
> machine
> on the same isolated network segment that it's on, and then shell over
> from
> that machine.
>
> Today around noon, the machine suddenly stopped responding to pings. I
> went
> down to the server room and couldn't find anything wrong.   No notes
on
> the
> console screen, no anomalous entries in the security or message logs.
> So, in
> the interest of getting it back up quickly, I rebooted it. That
worked.
> About an hour later, the same thing happened... my network monitor
tells
> me
> that it's not responding to pings. So before I go down to the server
> room, I
> run a few tests... the firewall is still blocking packets like a
champ.
> I
> run nmap against a host the firewall protects, and everything comes
back
> fine.  But when I go downstairs to the console, I can't ping out to
it's
> 10.0.0.2 buddy, and no incoming pings work either.  I'm at a loss on
how
> to
> troubleshoot this, folks.  I could really use a few ideas, so please
> send
> them along!
>
> Thanks in Advance!
> Bill
>

Is this server directly behind your router and does it have a valid
routeable ip on it also?

--

Micheal Patterson
Network Administration
Cancer Care Network
405-733-2230

_______________________________________________
freebsd-questions at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribe at freebsd.org"



More information about the freebsd-questions mailing list