Bug 20197

Summary: rc.firewall with firewall_type=simple doesn't work with natd
Product: Base System Reporter: Stephen Montgomery-Smith <stephen>
Component: confAssignee: ru <ru>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: Unspecified   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
file.diff
none
ddd
none
ddd none

Description Stephen Montgomery-Smith 2000-07-26 18:40:01 UTC 
Incoming packets that get translated by natd to be on the internal
network are killed by the rules following the line
# Stop RFC1918 nets on the outside interface

Fix: Have the natd divert rule come after the lines associated with
# Stop RFC1918 nets on the outside interface
Here is a patch to /etc/rc.firewall

How-To-Repeat: 
Happens every time
Comment 1 Stephen Montgomery-Smith 2000-07-26 23:04:25 UTC 
Sorry, what I have doesn't work - use this instead:




-- 
Stephen Montgomery-Smith
Department of Mathematics, University of Missouri, Columbia, MO 65211
Phone 573-882-4540, fax 573-882-1869
http://www.math.missouri.edu/~stephen  stephen@math.missouri.edu
Comment 2 Stephen Montgomery-Smith 2000-07-26 23:38:53 UTC 
Or an even better way - sorry for all my follow ups.
Comment 3 Gregory Bond 2000-07-27 00:38:44 UTC 
See http://www.freebsd.org/cgi/query-pr.cgi?pr=13769 for an earlier PR with a 
better solution to this problem.

Someone really orta commit this.....  it comes up quite regularly.
Comment 4 Stephen Montgomery-Smith 2000-07-27 00:47:32 UTC 
Gregory Bond wrote:
> 
> See http://www.freebsd.org/cgi/query-pr.cgi?pr=13769 for an earlier PR with a
> better solution to this problem.
> 
> Someone really orta commit this.....  it comes up quite regularly.

Actually I like the solution I offered (not mine) a bit better because
it closes slightly more possible bad traffic.

-- 
Stephen Montgomery-Smith
Department of Mathematics, University of Missouri, Columbia, MO 65211
Phone 573-882-4540, fax 573-882-1869
http://www.math.missouri.edu/~stephen  stephen@math.missouri.edu
Comment 5 Sheldon Hearn freebsd_committer freebsd_triage 2000-07-27 12:33:54 UTC 
Responsible Changed
From-To: freebsd-bugs->ru

Ruslan, this one may interest you.
Comment 6 ru freebsd_committer freebsd_triage 2000-08-04 15:05:21 UTC 
State Changed
From-To: open->closed

Duplicate of PR 13769.