|
||||||||
Hi list, I'm trying to use m0n0 (1.2b1) as a 1NIC (onboard sis900 ) firewall/router using VLANs, but something got wrong. ( I tried this before using previous versions, but none worked ). I get DHCP on lan ( VLAN1 ), I can access WebGUI, also I can resolve DNS ( trought forwarder ), and I can ping to external internet addresses, but no application that uses TCP/IP passes troght IT. I'm using PPPoE on WAN ( VLAN 2 ), and My switch config is OK ( 3com superstack ii 1100 series ). A cut of my status.php::: ------------------------------------------ sis0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 ether 00:d0:09:6c:54:7f media: Ethernet autoselect (10baseT/UTP <full-duplex>) status: active lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384 inet 127.0.0.1 netmask 0xff000000 ppp0: flags=8010<POINTOPOINT,MULTICAST> mtu 1500 sl0: flags=c010<POINTOPOINT,LINK2,MULTICAST> mtu 552 faith0: flags=8002<BROADCAST,MULTICAST> mtu 1500 vlan0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255 ether 00:d0:09:6c:54:7f media: Ethernet autoselect (10baseT/UTP <full-duplex>) status: active vlan: 1 parent interface: sis0 vlan1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 ether 00:d0:09:6c:54:7f media: Ethernet autoselect (10baseT/UTP <full-duplex>) status: active vlan: 2 parent interface: sis0 ---------------------------------------------------------- another part on NAT ---------------------------------------------------------- List of active MAP/Redirect filters: map ng0 192.168.1.0/24 -> 0.0.0.0/32 proxy port ftp ftp/tcp map ng0 192.168.1.0/24 -> 0.0.0.0/32 portmap tcp/udp auto map ng0 192.168.1.0/24 -> 0.0.0.0/32 rdr ng0 0.0.0.0/0 port 3389 -> 192.168.1.222 port 3389 tcp rdr ng0 0.0.0.0/0 port 8888 -> 192.168.1.222 port 8888 tcp * active mappings, seems ok, but none actually works. I removed it because it's too much of space and because of exposure of wan ips. List of active host mappings: 192.168.1.222 -> 0.0.0.0 (use = 3 hv = 1133) 192.168.1.222 -> 0.0.0.0 (use = 1 hv = 1133) -------------------------------------------------- I'm used to see numbers below 100 on HV, so I found that is weird, is that ok to have a high number like that ? =============================================== RIght now, I'm using another m0n0wall box, with 2 NICs ( 3com isa ) and everything works, but i needed to replace it, by the never one. regards, Allan. --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.778 / Virus Database: 525 - Release Date: 15/10/2004 |