On Fri, Apr 18, 2014 at 2:23 AM, Lubo Diakov <lubodia...@gmail.com> wrote:
> I may be missing something very simple, so if anyone can offer some > help I'd be grateful. > > I want to set up a i386 OpenBSD system (using 5.4, but can try current > 5.5 if that would help) to act a gateway/firewall. 3 network > interfaces, 2 wired, one wifi (ignoring wifi ATM, want to get wired > working, then deal with wifi later). > > ifconfig rl0: (static WAN IP, routable when used with another system) > inet w.x.y.z 255.255.255.0 > > ifconfig rl1: (static LAN IP) > inet 192.168.y.z 255.255.255.0 > > resolv.conf (2 known working IP addresses for nameservers, again > working in other OS) > > /etc/mygate (IP address of ISP gateway used on other OS for same > connection, known working, have also tried "route add default > ISP.gateway" manually) > > ping, traceroute, etc. to IP address of gateway fail, I suspect even > the default pf rules may block this, but how to confirm/or rule out? > (perhaps pfctl -d?) > > what should route show -inet or netstat -rn look like if configured > properly? > the first line of route show -inet reads (right after booting): > dest. gateway flags > default ISP gateway GS > > net.inet.ip.forwarding=1 (to forward between WAN and LAN) in sysctl.conf > -- > ÐÑÐ±Ð¾Ð¼Ð¸Ñ ÐавÑилов ÐÑков > емайл: > lubodia...@gmail.com > We are missing a lot of outputs to help you. Like ifconfig, netstat -rn, dmesg, cat /etc/resolv.conf, cat /etc/mygate ......