[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Weird Arp problem with bridging on openbsd 2.8



I have an openbsd box set up as a firewall for the company I work for,  It has two external interfaces, hooked to our cablemodem through a hub,  and 3 internal interfaces.

External Interface xl0 - Bridged with internal interface rl3
External Interface rl0 (24.XX.XX.187 - set up to do nat for machines on rl1,  (DMZ with private IP range, 10.10.11.0/32) and rl2, (our internal network, 10.10.10.0/32)

I have a machine on the other side of the bridge (24.XX.XX.113),   and can connect to it with ssh from machines inside the Internal Network(10.10.10.0/32),  or from external machines,  but If I try and connect to it directly from the firewall with ssh it won't connect,  although pings do get a reply.

On the firewall Ive tried looking at arp -an,  but see no entries for 24.XX.XX.113,  so I tried to add a manual definition for it with "arp -s 24.XX.XX.113 00:20:af:9e:94:a9 permanent"  and got an error "cannot intuit interface index and type for 24.XX.XX.113"

/etc/bridgename.bridge0 contains:
add xl0
add rl3
up

Any ideas on how to get around this problem would be apreciated.

Seamus Wassman



Visit your host, monkey.org