set sysctl, but still can't get forwarding...

[Sam Roberts <sam_(_at_)_cogent_(_dot_)_ca>]

I can't seem to get my openbsd box to forward packets!

I've set net.inet.ip.forwarding=1 in sysctl.conf, and I'm using the generic kernel.

My networking seems to otherwise be fine, I just can't get through the openbsd system.

I've put the openbsd box on the company net, and am trying to isolate my desktop
machine behind it.  My situation:

internet <-> company fw (192.168.3.1) <-> (192.168.3.51) openbsd (10.0.0.1) <-> 10.0.0.2 me

>From "me" I can ping the 10.0.0.1, and I can ping through the openbsd box to the
interface on the other side (192.168.4.51), but I can't get any further:

# ping 192.168.3.1
PING 192.168.3.1 (192.168.3.1): 56 data bytes
--- 192.168.3.1 ping statistics ---
3 packets transmitted, 0 packets received, 100% packet loss

# ping 192.168.3.51
PING 192.168.3.51 (192.168.3.51): 56 data bytes
64 bytes from 192.168.3.51: icmp_seq=0 ttl=255 time=24 ms

>From "openbsd" I can ping openbsd.org, and can ping 10.0.0.2. If it matters there's
only one ethernet, I don't have a hub here, so I'm running everything on the same
physical net, which should be just fine.

I've set ipfilter and ipnat to "NO" to make sure there are no rulesets to confuse anything.

I think routing is ok:

Routing tables

Internet:
Destination        Gateway            Flags     Refs     Use    Mtu  Interface
default            192.168.3.1        UGS         0        0   1500  ne0
10/8               link#2             UC          0        0   1500  ep1
127/8              127.0.0.1          UGRS        0        0  32972  lo0
127.0.0.1          127.0.0.1          UH          0        0  32972  lo0
192.168.3/24       link#1             UC          0        0   1500  ne0
192.168.3.1        link#1             UHL         1        0   1500  ne0
192.168.3.14       0:80:c8:e3:dd:ce   UHL         1       92   1500  ne0
192.168.3.51       127.0.0.1          UGHS        0        0  32972  lo0
224/4              127.0.0.1          URS         0        0  32972  lo0

And my interfaces should be as well:

Name    Mtu   Network     Address              Ipkts Ierrs    Opkts Oerrs  Coll
lo0     32972 <Link>                               0     0        0     0     0
lo0     32972 fe80::/64   fe80::1                  0     0        0     0     0
lo0     32972 ::1/128     ::1                      0     0        0     0     0
lo0     32972 127/8       127.0.0.1                0     0        0     0     0
lo1*    32972 <Link>                               0     0        0     0     0
ne0     1500  <Link>      00:80:c8:1b:cb:38      300     0      102     0     0
ne0     1500  fe80::/64   fe80::280:c8ff:fe      300     0      102     0     0
ne0     1500  192.168.3/2 192.168.3.51           300     0      102     0     0
ep1     1500  <Link>      00:a0:24:75:b5:cc       63     0        4     0     0
ep1     1500  fe80::/64   fe80::2a0:24ff:fe       63     0        4     0     0
ep1     1500  10/8        10.0.0.1                63     0        4     0     0

Can somebody give me a suggestion? I'm not to sure what else to look at!

Thanks!
Sam

-- 
Sam Roberts (sam_(_at_)_cogent_(_dot_)_ca), Cogent Real-Time Systems (www.cogent.ca)