[nycbug-talk] OpenBSD PF help

[Barry Kominik]

Hi,
I'm having problems getting a pf filter working. I must be doing something
simple wrong, anybody have any advice?

I have two public routable IP blocks, let's say 1.1.1.1/29 and 2.2.2.1/28.
The colo routes both networks to my handoff. I have the int0 connected to
the handoff from the co-lo and ext0 configured as the 2.2.2.1. I have
net.inet.ip.forwarding=1. Shouldn't basic routing work without even enabling
the firewall? Hosts on the 2 network can ping trough to the
1.1.1.1interface, but not beyond. Hosts on the internet can see
1.1.1.1 but nothing on the 2. network. I can get this to work by setting up
a bridge between the interfaces, but this strikes me as incorrect. Am I
missing something simple? If not I can pay for some consulting time.

Thanks,
Barry
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nycbug.org/pipermail/talk/attachments/20070611/d46716dd/attachment.html>