OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: OpenBSD (openbsdrawtenla.com)
Date: Thu May 02 2002 - 05:16:55 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi,

    We were installing a gateway/firewall box (running OBSD 3.1 snapshot taken
    on March 12th) that needed to do nat for an internal network and binat for a
    server on a dmz.

    The nat rules worked fine, and we configured the permanent arp entries for
    the two addresses that it was using (one for the binat, and one for nat).
    However, the box never sent the arp replies when they were requested.

    Finally, we had to install 3.0-stable and everything worked as it should.

    Is there (or was there) a bug in the arp/proxy arp code or is there some new
    syntax that is now needed for this to work in 3.1??

    The command used was:

    arp -s <IP> <EXTERNAL FW MAC ADDRESS> permanent pub

    The arp entry was registered in the arp table, but it did not answer the
    requests.

    Regards,
    Luis C.