Hi,
Can see you are allowing packets 'out' of your internal interfaces, but
what about packets getting into your internal interfaces?
pass quick on ath0/rl0 keep state
Also, if you have a private IP address on your modem (it will be doing
NAT), and you are trying to NAT on your OpenBSD box, you are double
NATing which is bad..
Either put the modem into bridged mode to allow placing the ISPs public
IP addres onto the external interface of the OpenBSD box (recomended),
or don't NAT on the OpenBSD box.
Cheers, A
On Wed 26 Mar 2014 03:28:59 GMT, Wong Peter wrote:
Hello to all, I had try to set up openbsd as home router but eventually it
fail to function properly.
External Interface (vr0)
192.168.1.2 255.255.255.0 none
Internal Interface (rl0)
172.16.10.1 255.255.255.0 none
Wireless Interface (ath0)
192.168.5.1 255.255.255.0 none
External interface connects to a modem with ip address of 192.168.1.254.
*Routing Table* (route show | more)
Destination Gateway Flags Interface
default 175.13.8.127.254 UGS tun0
175.130.127.254 175.135.116.213 (PPPOE IP address) UH tun0
loopback loopback UGRS lo0
loopback loopback UH lo0
172.16.10/24 link#2 UC rl0
172.16.10.3 inet6 UHLC rl0
192.168.1/24 link#1 UC vr0
192.168.5/24 link#3 UC ath0
My wireless interface light is keep on blinking rather stay on stable mode.
*Packet Filter Rules* (pfcrt -sr)
nat on vr0 from !(vr0) to any -> (vr0) round-robin
scrub on vr0 all no-df fragment reassemble
scrub on vr0 all reassemble tcp
block drop in log on vr0 all
pass out quick on ath0/rl0 keep state.
Problem:
I can ping Google DNS(8.8.8.8) from openbsd machine. or browsing internet.
I cannot ping Google DNS(8.8.8.8) from LAN PC.
I can ping my external modem(192.168.1.254) which return echo reply.
I have no idea why ping the modem does reply but ping external network with
no reply.
Please help.
