Hey folks just thought I'd UPGRADE to a newer snapshot tonight and now
I can't seem to get my re0 network interface to "ping" (from either
the client or from OpenBSD) and/or packet forwarding via PF - although
oddly I seems to be able to get receive dhcp queries from it and get a
MAC address (but then - the client was Windows XP, and since I hadn't
rebooted XP after the OpenBSD upgrade and of course XP tends to cache
just about everthing... for the record I used XP's disable wait 5
seconds/enable interface and successfully got an IP address as a
test).
Anyways I have an xl card in the OpenBSD box, I switched everything to
that and ping/nat-forwarding/internet works! (after a move of the
hostname.re0 file and modifications my original pf.conf file)
And yes I "unrestricted" seperate PF file and it didn't change a thing
(example follows)
Dmesg @ bottom...
=-=-=-=-=-=-
# cat /etc/pf.open
# $OpenBSD: pf.conf,v 1.31 2006/01/30 12:20:31 camield Exp $
#
# See pf.conf(5) and /usr/share/pf for syntax and examples.
# Remember to set net.inet.ip.forwarding=1 and/or net.inet6.ip6.forwarding=1
# in /etc/sysctl.conf if packets are to be forwarded between interfaces.
ext_if="rl0"
int_if="re0"
table <spamd> persist
table <spamd-white> persist
set skip on lo
scrub in
nat-anchor "ftp-proxy/*"
rdr-anchor "ftp-proxy/*"
nat on $ext_if from $int_if:network -> ($ext_if)
rdr on $int_if proto tcp from any to any port 21 -> 127.0.0.1 \
port 8021
rdr pass on $ext_if proto tcp from <spamd> to port smtp \
-> 127.0.0.1 port spamd
rdr pass on $ext_if proto tcp from !<spamd-white> to port smtp \
-> 127.0.0.1 port spamd
anchor "ftp-proxy/*"
pass in all keep state
pass out all keep state
=-=-=-=-=-=-
The command I used to test the /etc/pf.open file:
# pfctl -F all;pfctl -f /etc/pf.open
I don't have the pfctl output because it was done in a different
terminal at the time.
=-=-=-=-=-=-
# dmesg
OpenBSD 3.9-current (GENERIC) #942: Tue Jul 4 19:31:30 MDT 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium III ("GenuineIntel" 686-class) 722 MHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
real mem = 536375296 (523804K)
avail mem = 483475456 (472144K)
using 4256 buffers containing 26923008 bytes (26292K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(a3) BIOS, date 06/28/00, BIOS32 rev. 0 @
0xfb380, SMBIOS rev. 2.3 @ 0xf0800 (39 entries)
bios0: <http://www.abit.com.tw> i440BX-W83977 (BH6)
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 70102 dobusy 1 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf0000/0xb808
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdf00/144 (7 entries)
pcibios0: PCI Exclusive IRQs: 10 11 12
pcibios0: PCI Interrupt Router at 000:07:0 ("Intel 82371SB ISA" rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc0000/0x8000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82443BX AGP" rev 0x02
ppb0 at pci0 dev 1 function 0 "Intel 82443BX AGP" rev 0x02
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "Matrox MGA G400/G450 AGP" rev 0x03
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pcib0 at pci0 dev 7 function 0 "Intel 82371AB PIIX4 ISA" rev 0x02
pciide0 at pci0 dev 7 function 1 "Intel 82371AB IDE" rev 0x01: DMA,
channel 0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: <ST3250823A>
wd0: 16-sector PIO, LBA48, 238475MB, 488397168 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: <HL-DT-ST, DVDRAM GSA-4167B, DL12> SCSI0
5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
uhci0 at pci0 dev 7 function 2 "Intel 82371AB USB" rev 0x01: irq 11
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
piixpm0 at pci0 dev 7 function 3 "Intel 82371AB Power" rev 0x02: polling
iic0 at piixpm0
iic0: addr 0x2d 00=c4 01=01 02=30 03=0b 04=3f 05=04 06=21 07=81 08=10
09=77 0a=44 0b=d3 0c=aa 0d=18 0e=08 0f=08 10=02 11=09 12=14 13=18
14=6e 15=2f 16=cd 17=e9 18=a1 19=1e 1a=87 1b=a2 1c=81 1d=b4 1e=8a
1f=00 20=68 21=5e 22=cd 23=ba 24=c4 25=db 26=d4 27=2b 2a=90 2b=8a
2c=04 2d=20 2e=20 2f=42 30=8c 31=1a 32=10 33=20 34=00 35=1a 36=23
37=95 38=54 39=82 3a=a0 3b=01 3c=50 3d=ac 3e=5a 3f=28 40=01 41=de
42=07 46=7f 47=58 48=2d 49=c0 4a=00 4b=c0 4c=c0 4d=c0 4e=5a 4f=00
50=01 51=00 52=00 56=7f 57=58 58=2d 59=c0 5a=c0 5b=c0 5c=c0 5d=c0
5e=c0 5f=00 60=68 61=5e 62=cd 63=ba 64=c4 65=db 66=d4 67=2b 6a=90
6b=8a 6c=04 6d=20 6e=20 6f=42 70=8c 71=1a 72=10 73=20 74=00 75=1a
76=23 77=95 78=54 79=82 7a=a0 7b=01 7c=50 7d=ac 7e=5a 7f=28 80=c4
81=01 82=30 83=0b 84=3f 85=04 86=21 87=81 88=10 89=77 8a=44 8b=d3
8c=aa 8d=18 8e=08 8f=08 90=02 91=09 92=14 93=18 94=6e 95=2f 96=cd
97=e9 98=a1 99=1e 9a=87 9b=a2 9c=81 9d=b4 9e=8a 9f=00 a0=68 a1=5e
a2=cd a3=ba a4=c4 a5=db a6=d4 a7=2b aa=90 ab=8a ac=04 ad=20 ae=20
af=42 b0=8c b1=1a b2=10 b3=20 b4=00 b5=1a b6=23 b7=95 b8=54 b9=82
ba=a0 bb=01 bc=50 bd=ac be=5a bf=28 c0=01 c1=00 c2=00 c6=7f c7=58
c8=2d c9=c0 ca=c0 cb=c0 cc=c0 cd=c0 ce=c0 cf=00 d0=01 d1=00 d2=00
d6=7f d7=58 d8=2d d9=c0 da=c0 db=c0 dc=c0 dd=c0 de=c0 df=00 e0=68
e1=5e e2=cd e3=ba e4=c4 e5=db e6=d4 e7=2b ea=90 eb=8a ec=04 ed=20
ee=20 ef=42 f0=8c f1=1a f2=10 f3=20 f4=00 f5=1a f6=23 f7=95 f8=54
f9=82 fa=a0 fb=01 fc=50 fd=ac fe=5a ff=28
re0 at pci0 dev 13 function 0 "Realtek 8169" rev 0x10: irq 12, address
00:40:f4:ce:51:7a
rgephy0 at re0 phy 7: RTL8169S/8110S PHY, rev. 0
xl0 at pci0 dev 15 function 0 "3Com 3c905B 100Base-TX" rev 0x24: irq
10, address 00:10:4b:71:2d:d0
exphy0 at xl0 phy 24: 3Com internal media interface
rl0 at pci0 dev 17 function 0 "D-Link Systems 530TX+" rev 0x10: irq
11, address 00:05:5d:2c:f6:b1
rlphy0 at rl0 phy 0: RTL internal PHY
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: <PC speaker>
spkr0 at pcppi0
lm0 at isa0 port 0x290/8: LM79
npx0 at isa0 port 0xf0/16: using exception 16
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
isapnp0 at isa0 port 0x279: read port 0x203
ym0 at isapnp0 "OPL3-SA3 Sound Board, YMH0021, , " port
0x220/16,0x530/8,0x388/8,0x330/2,0x370/2 irq 5 drq 0,1
midi1 at ym0: <YM MPU-401 UART>
audio0 at ym0
joy0 at isapnp0 "OPL3-SA3 Sound Board, YMH0022, PNPB02F, " port 0x201/1
biomask ebdd netmask ffdd ttymask ffdf
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
dkcsum: wd0 matches BIOS drive 0x80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302
=-=-=-=-=-=-
I didn't have problems with re0 interface before; and I think I was
running a snapshot beta from March 2006 (can't remember the exact
date). I thought perhaps I skipped a step in the upgrade?
Cheers, Flames, Reminders, all welcome!
