OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: bi-directional routing

From: Adam Skutt (askuttwnec.edu)
Date: Wed Jun 09 2004 - 21:35:49 CDT


Bob DeBolt wrote:
> The thing I haven't found out is this.
>
> With two separate networks, i.e.
>
> 5.0.0.2/24 <-> 5.0.0.1/24 IF-A OBSD IF-B 70.0.0.1/24 <-> 70.0.0.2
> Unit 1 Default gateway = 70.0.0.2 Unit 2
>
> Initiating services etc. from Unit 1 to Unit 2 everything
> works perfectly. Initiation of services from Unit 2 to Unit 1
> don't work. When I reverse the default gateway to 5.0.0.2,
> Unit 2 to Unit 1 sessions work perfectly an Unit 1 to Unit 2 do not.
You can't, AFAIK, have multiple default gateways, at least at the same
priority. Morever, as long as the machines in the 70.0.0/24 subnet have
either: a) the OBSD machine as the default gateway r, b) a static route
for the 5.0.0/24 subnet installed with the OBSD machine listed as the
gateway; and have IP forwarding enabled on OBSD, everything should just
work. Assuming you haven't setup PF or anything, nothing should prevent
OBSD from routing the traffic from one network to the other.

Maybe want you to to setup is a layer-2 (i.e., ethernet) bridge? If so,
you need to enable the bridge interface and add the two physical
interfaces to it. See the various manpages on bridging for details.

Otherwise, I think you're trying to change server configuration when the
client configuration is at fault.

The routing tables of the OBSD machine, and a machine on each subnet
would be useful in helping to resolve this.

-- Adam