Re: Problems with routing on OpenBSD firewall

[Kekes Stamatis <skekes@kosmoslink.gr>]

First of all have you enabled the packet forwarding ?
if you did that then I don't know if you placed any route entry to the 
hop of your network to route the packets for the network that is located 
behind the firewall in the firewall.
for example if you have a central hop with ip 192.168.0.1 and your first 
subnet is 192.168.0.0/24 and the network behind the firewall is the 
192.168.1.0/24 and your firewalls "front" nic has 192.168.0.3 ip addres 
you have to add in the hop a static route that routes packets having 
destination the network 192.168.1.0/24 must been forwarded to 
192.168.0.3 which knows better how to manage theese packets.
 I'll be glad to help you more if you provide any network configuration 
sample and what you have done in your firewall
 Best regards
  Stamatis Kekes
  Technical Director of KosmosLink LTD
  mailto:skekes@kosmoslink.gr
  http://www.kosmoslink.gr
Andre Solheim wrote:

>Copyright by Andre L. Solheim: 2002
>MIME-Version: 1.0
>Content-Transfer-Encoding: quoted-printable
>Message-Id: <200206210024.12142.andre.solheim@broadpark.no>
>
>Hi
>I've just installed an OpenBSD machine as firewall in my network. It has =
>3=20
>nics. On as external interface, one for my DMZ and one for my internal=20
>network.
>When I am logged in on the firewall, I can ping machines on my internal=20
>network and on the internet. But I am unable to ping machines in the DMZ.
>I get the message "No route found to host", but when I run the route show=
>=20
>command i have a route to my DMZ (172.16.16.0, and the gateway is=20
>172.16.16.1)
>Anyone know how I can resolv this?
>--=20
>Sincere regards
>
>Andr=E9 L. Solheim
>__________________________________________________________________
>"Imagine a school with children =20
> that can read and write, but with teachers who cannot, and you =20
> have a metaphor of the Information Age in which we live." =20
>                                                     Peter  Cochrane.