Sstrhsrtj

I am trying to set up a freebsd router that sits between the cable/dsl modem and my lan machines. Here is the logical setup:

Cable/DSL modem connected to internet:

gateway 192.168.0.1

FreeBSD Router (with two nics):

em0 192.168.0.121

ue0 10.0.0.1

FreeBSD Lan Machine:

em0 10.0.0.2

It seems like the path from the lan to the wan should be 10.0.0.2->10.0.0.1->192.168.0.1->wan and that I should be able to ping a machine on the internet from the lan machine.

In summary, though:

• The internet is accessible from the FreeBSD router.


• The lan machine is acccessible from the FreeBSD router.


• The FreeBSD router is accessible from the lan machine.


• The internet is not accessible from the lan machine.

Here are the /etc/rc.conf entries on the router:

ifconfig_ue0="inet 10.0.0.1 netmask 255.255.255.0"

ifconfig_em0="inet 192.168.0.121 netmask 255.255.255.0"

gateway_enable="YES"                                                   

defaultrouter="192.168.0.1" 

Here are the /etc/rc.conf entries on the lan machine:

ifconfig_em0="inet 10.0.0.2 netmask 255.255.255.0"

defaultrouter="10.0.0.1"

Here are the routing table entries from the FreeBSD router (loki):

netstat -r            

Routing tables



Internet:                                          

Destination        Gateway            Flags      Netif Expire

default            192.168.0.1        UGS         em0 

10.0.0.0/24        link#3             U           ue0

10.0.0.1           link#3             UHS         lo0

127.0.0.1          link#2             UH          lo0

192.168.0.0/24     link#1             U           em0

192.168.0.121      link#1             UHS         lo0

Here are the routing table entries from the lan machine (freebird):

netstat -r

Routing tables



Internet:

Destination        Gateway            Flags      Netif Expire

default            10.0.0.1           UGS         em0

10.0.0.0           link#1             U           em0

10.0.0.2           link#1             UHS         lo0

freebird           link#2             UH          lo0

netstat on the lan machine is sloooowwwww.

Does this information appear correct for the setup, or is there an apparent problem??

I think you need to add a static route on your modem, to route all incoming traffic for 10.0.0.0/8 to 192.168.0.121.

I am rather assuming that NAT is being done in the modem here.

This would be solution in pf firewall, in case NAT-ing is not done in modem.
However, NAT-ing can be done in pppd or pppoe, as you state you're using DSL.

Edit /etc/pf.conf:

external_iface="em0"  # your WAN facing interface

internal_iface="ue0" # your LAN facing interface



set skip on lo0 # skip filtering on loopback

nat on $external_iface from $internal_iface:network to any -> ( $external_iface:0)



block in on $external_iface



pass in quick on $internal_iface from $internal_iface:network to any keep state



pass out on $external_iface

Regarding DNS, you can setup a local_unbound on Frebsd box, set it to listen on 192.168.0.1, then either push this configuration over dhcpd to your clients on LAN, or manually editing /etc/resolv.conf like:

echo 'nameserver 192.168.0.1' > /etc/resolv.conf

You need to set up NAT in your FreeBSD Router machine and need to NAT(With port translation) your 10.0.0.0/8 networks to 192.168.0.121/32 IP address. Otherwise your LAN machine can not access internet