OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Beginner NAT / route / pfctl question

From: Maurice Janssen (mauricez74.net)
Date: Wed Aug 15 2007 - 09:26:54 CDT


On Wednesday, August 15, 2007 at 15:59:34 +0300, Lars Noodin wrote:
>I'm building a firewall / gateway on OpenBSD and seem to have the pieces
>working separately, but need a clue as to how to get them to fit
>together. Basically, I can connect to and from each interface but not
>across them.
>
>I can connect from A to B (and from B to A) via SSH, ping, HTTP
>I can connect C to D and E and D or E to C.
>
>However, I cannot but would like to connect from A to D and E. I expect
>that the routing is somehow fouled up or needs to be done manually.
>pf.conf is already about as simple as it can be.
>
>Where should I look to allow connections between A and E?

The two most obvious things to look at:
- enable IP-forwarding on the fw/router
- setup B as default gateway on all hosts in A

>Would this be better using IPv6 only?

Not while E is mostly IPv4 based...

HTH,
Maurice