Argh, things have gone from bad to worse. So I rebooted the machine on a whim, thinking that maybe the network debacle from earlier could be cleared up by a simple reboot. No go. And now, if pf is enabled, no traffic can flow anywhere. If it's disabled, the machine acts simply as a bridge.
I am obviously in over my head here. I have not used OpenBSD extensively in the past. I have used FreeBSD and ipfw, so I am familiar with the general concepts of *nix systems and firewalls. All I want if for traffic to flow from the outside world to the switch and servers beyond accoridng to the rules laid out in pf, and to be able to access the machine via ssh. Whether or not it is configured as a bridge is not important to me. Can anyone hold my hand on how to effectively bring this about, or point me to a simple guide to configuring a basic firewall with OpenBSD? Thanks again for all the help today. On 6/26/06, Matt Singerman <[EMAIL PROTECTED]> wrote:
Okay, I think I understand what you are saying - one of the interfaces has to have an IP in order to connect into it. My questions is, which one of the two should it be, and what should it be? I assume not the same IP as the bridge itself? On 6/26/06, Peter Blair <[EMAIL PROTECTED]> wrote: > You should be able to configure one of the bridged interfaces to have > an IP in order for you to SSH into the box. > > http://www.openbsd.org/faq/faq6.html#Bridge > > On 6/26/06, Matt Singerman <[EMAIL PROTECTED]> wrote: > > I believe the server was configured as a bridge - bridgename.bridge0 > > exists, and contains: > > > > add dc0 add dc1 up > > > > It was running for a good 300 days or so. It was set up and > > configured by my predecessor, and I am not completely sure on all of > > its configurations. > > > > On 6/26/06, Peter Blair <[EMAIL PROTECTED]> wrote: > > > That sorta makes sense if your firewall was working as a bridge, but I > > > don't think that you mentioned anything about a bridgename.bridge0. > > > > > > Was/Is your machine acting as a nat-style firewall? If so, then > > > you'll have to assign it some IPs. > > > > > > How long was it running since its last reboot? Were the IP settings > > > done manually via the console but never reflected in the > > > /etc/hotname.dc* files? > > > > > > On 6/26/06, Matt Singerman <[EMAIL PROTECTED]> wrote: > > > > > > > /etc/hostname.dc0 and .dc1 both just contain "up" and haven't been > > > > modified since 2003. > > > > > > > > Shouldn't there be an inet entry with the IP addresses for each of the > > > > cards listed? What happened to them?
