(more) confusion configuring NAT

[Christopher Cowart]

Robert Huff wrote:
> Christopher Cowart writes:
>>  Do you have gateway_enable="YES" in your /etc/rc.conf?
> 
> huff@>> grep gate /etc/rc.conf
> gateway_enable="YES"
> 
>>  $ sysctl -a net.inet.ip.forwarding 
>>  net.inet.ip.forwarding: 1
> 
> huff@>> sysctl -a net.inet.ip.forwarding
> net.inet.ip.forwarding: 1
> 
> 
>>  Is the interface mentioned in the nat config the interface with the
>>  public IP?
> 
> 	em0 connects to the cable modem.
> 
>>  Try putting `$CMD count log ip from any to any' rules to see if traffic
>>  is matching where you expect it to;
> 
> 	Where do I find the results of this

Typically /var/log/security. Assuming you have IPFIREWALL_VERBOSE in
your kernel config.

-- 
Chris Cowart
Network Technical Lead
Network & Infrastructure Services, RSSP-IT
UC Berkeley
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 825 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20080320/b0a88e8d/attachment.pgp