NATD Problem

[Paul Richards]

--On Monday, April 02, 2001 10:40:48 +0100 Simon Clayton 
<Simon at reftech.co.uk> wrote:

> Being a total novice in the ipfw/natd arena I'm not surprised that I've
> hit a problem with the setup of it all!
>
> Basically, I have had ADSL installed and need a firewall between my
> internal LAN running 10.0.0.x addresses and the outside world.  I
> installed FreeBSD 4.2, recompiled the kernel with IPFIREWALL and IPDIVERT
> etc, added the lines in rc.conf to enable NATD and do -dynamic and then
> put the two lines into a very blank rc.firewall to divert all packets to
> natd and "add pass...".

You shouldn't edit rc.firewall unless you're tweaking it for some specific 
purpose, and since your a total novice you shouldn't be doing that :-) It 
also shouldn't be very blank so there's something wrong there.

I think for an open (as in you're not concerned about firewalling) natd 
configuration you should set firewall_type=openclient in /etc/rc.conf which 
basically sends all traffic to natd.

If you need more help you need to provide the output from `ipfw l` and it 
would also be worth running natd on the command line with -v to get some 
better diagnostics.

Paul.