Ive setup my openbsd box as a router and everything works great except for
2 things: the openbsd box itself isn't routing for itself but all machines
behind it work just fine with dns and routing. At the openbsd box, if I try
to ping anything by dns, it will sit for about 10 minutes then error that
it could not find the host. Pinging any IP will just time out, and
connections to my openbsd box (ssh for instance) from any internal machine
are very slow to make initial connection.

My configuration is this:
OpenBSD 3.8 with two network cards, rl0 (dhcp) connected directly to my
cable modem, bce0 (192.168.1.60) connected to a null hub.

Thanks in advance for any assistance.

pf.conf
###################################################
internal="bce0"
external="rl0"

scrub in all

nat on $external from !($external) to any -> ($external:0)

set skip on lo

#########################################
#  Port forwarding
#########################################
rdr on $external proto tcp from any to any port 22 tag SSH -> 192.168.1.60
port 22

no rdr

pass in quick log on $external tagged SSH
pass out quick on $external tagged SSH

###########################################
block in on $external

antispoof log quick for lo0 inet
pass quick on lo0 all
block in quick on $external from any to 255.255.255.255

block log on $external all
block in from no-route to any
block out log quick on $external from ! $external to any
pass out on $external proto tcp from ($external) to any flags S/SA modulate
state queue ( q_defl,q_pri )

pass out on $external proto udp from ($external) to any keep state queue
(q_defl)
pass out on $external inet proto icmp from ($external) to any keep state
pass in quick on $internal
pass out quick log on $external

Reply via email to