OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Aaron Jackson (jacksonnegril.msrce.howard.edu)
Date: Fri May 11 2001 - 16:23:44 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    The documentation fails to mention (or at leas it used to) that you need
    to have a hostname.fxpX for each interface in you bridge that contains at
    least the word:

    up

    or on the command line ifconfig fxp0 up. Bridging does not turn the cards
    on.

    Aaron

    On Fri, 11 May 2001, Kit Halsted wrote:

    > I'm not having a good week, is it time to go home yet?
    >
    > Trying to bring up the (2.8+ patches) firewall I was almost ready to
    > deploy when NorthPoint died. Bridging (fxp0 ext, fxp1 int) firewall
    > with 3rd NIC (dc0) for administration. The bridge does not seem to be
    > bridging. Doing "tcpdump -i fxp0 -l" shows no traffic. Same thing on
    > fxp1 does show traffic when I try to connect from the test box behind
    > the firewall. This box was sitting between our router & our network,
    > bridging but not filtering, for about 3 weeks. 2 days ago, I put in
    > our ipf ruleset & ran /etc/netstart. At that point, traffic stopped
    > going anywhere. Thinking it was the rules, I edited them, then
    > reduced them to "pass in on fxp0 from any to any" & "pass in on fxp1
    > from any to any". Still no joy. Our ISP's tech guy had put an IP on
    > this box during our transition from DSL to 802.11, so I thought maybe
    > he'd screwed something up. Remembering all the patches for ipf, I
    > decided to try 2.9. I wiped the box & put 2.9 on via ftp. Still
    > doesn't work. If I configure the fxp cards with IPs, they do respond
    > to pings. Anybody care to whack me with a clue-by-four? Dmesg
    > follows, I don't know what other info may be relevant.
    >
    > Thanks,
    > -Kit
    >
    > berlin:kit {1} dmesg
    > OpenBSD 2.9-current (GENERIC) #666: Wed May 9 19:55:43 MDT 2001
    > deraadti386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
    > cpu0: Intel Pentium II ("GenuineIntel" 686-class, 512KB L2 cache) 351 MHz
    > cpu0:
    > FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SYS,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR
    > real mem = 268021760 (261740K)
    > avail mem = 243560448 (237852K)
    > using 3297 buffers containing 13504512 bytes (13188K) of memory
    > mainbus0 (root)
    > bios0 at mainbus0: AT/286+(00) BIOS, date 07/15/95, BIOS32 rev. 0 0xfd900
    > apm0 at bios0: Power Management spec V1.2
    > apm0: AC on, battery charge unknown
    > pcibios0 at bios0: rev. 2.1 0xf0000/0x10000
    > pcibios0: PCI IRQ Routing Table rev. 1.0 0xf7820/144 (7 entries)
    > pcibios0: PCI Interrupt Router at 000:07:0 ("VIA VT82C596A PCI-ISA" rev 0x00)
    > pcibios0: PCI bus #1 is the last bus
    > bios0: ROM list: 0xc0000/0xb000 0xcc000/0x1800 0xcd800/0x2800 0xe8000/0x4000!
    > pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
    > pchb0 at pci0 dev 0 function 0 "VIA VT82C691 Host-PCI" rev 0x01
    > ppb0 at pci0 dev 1 function 0 "VIA VT82C598 PCI-AGP" rev 0x00
    > pci1 at ppb0 bus 1
    > pcib0 at pci0 dev 7 function 0 "VIA VT82C596A PCI-ISA" rev 0x05
    > pciide0 at pci0 dev 7 function 1 "VIA VT82C571 IDE" rev 0x06: DMA,
    > channel 0 configured to compatibility, channel 1 configured to
    > compatibility
    > wd0 at pciide0 channel 0 drive 0: <FUJITSU MPE3136AT>
    > wd0: 16-sector PIO, LBA, 13031MB, 16383 cyl, 16 head, 63 sec, 26688576 sectors
    > pciide0: channel 0 interrupting at irq 14
    > wd0(pciide0:0:0): using PIO mode 4, DMA mode 2
    > atapiscsi0 at pciide0 channel 1
    > scsibus0 at atapiscsi0: 2 targets
    > cd0 at scsibus0 targ 0 lun 0: <TOSHIBA, DVD-ROM SD-M1202, 1020> SCSI0
    > 5/cdrom removable
    > pciide0: channel 1 interrupting at irq 15
    > cd0(pciide0:1:0): using PIO mode 4, DMA mode 2
    > pchb1 at pci0 dev 7 function 3 "VIA VT82C596 Power Management" rev 0x00
    > fxp0 at pci0 dev 8 function 0 "Intel 82557" rev 0x08: irq 9, address
    > 00:d0:b7:c3:c2:f0
    > inphy0 at fxp0 phy 1: i82555 10/100 media interface, rev. 4
    > fxp1 at pci0 dev 10 function 0 "Intel 82557" rev 0x08: irq 10,
    > address 00:d0:b7:c5:7b:71
    > inphy1 at fxp1 phy 1: i82555 10/100 media interface, rev. 4
    > dc0 at pci0 dev 11 function 0 "Lite-On PNIC-II" rev 0x25: irq 11
    > address 00:00:94:c7:95:72
    > dcphy0 at dc0 phy 31: internal PHY
    > vga1 at pci0 dev 12 function 0 "S3 Savage 4" rev 0x04
    > wsdisplay0 at vga1: console (80x25, vt100 emulation)
    > wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
    > isa0 at pcib0
    > isadma0 at isa0
    > pckbc0 at isa0 port 0x60/5
    > pckbd0 at pckbc0 (kbd slot)
    > pckbc0: using irq 1 for kbd slot
    > wskbd0 at pckbd0: console keyboard, using wsdisplay0
    > pcppi0 at isa0 port 0x61
    > midi0 at pcppi0: <PC speaker>
    > sysbeep0 at pcppi0
    > npx0 at isa0 port 0xf0/16: using exception 16
    > pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
    > fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
    > fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
    > biomask c040 netmask ce40 ttymask ce42
    > pctr: 686-class user-level performance counters enabled
    > mtrr: Pentium Pro MTRR support
    > dkcsum: wd0 matched BIOS disk 80
    > root on wd0a
    > rootdev=0x0 rrootdev=0x300 rawdev=0x302