Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My FreeBSD 9.1 has 3 interfaces:

de0 - Internet 1.1.1.45

de1 - LAN 192.168.1.1

de2 - DMZ which I have just added 1.1.1.43

default gateway 1.1.1.33

I have one host on DMZ 1.1.1.42

i have gateway_enable="YES" in /etc/rc.conf

I have added a route: route add 1.1.1.42 1.1.1.43

On the DMZ host i put default gateway as 1.1.1.43.

For now I have turned firewall(pf) off. However, now when I ping 1.1.1.42 from outside it doesn't reach.

The IP block 1.1.1.33-1.1.1.48 is given by provider.

What could be the problem reaching 1.1.1.42?

Thanks

share|improve this question
    
tcpdump -n dst 1.1.1.42 shows me "ARP, Request who-has 1.1.1.42 tell 1.1.1.33" –  epema Jun 26 '13 at 17:50
1  
core issue is that you have two interfaces in the same network on the same device –  emynd Jun 26 '13 at 18:28
    
You can fix two ways: 1) create static route on your providers edge router that to route 1.1.1.42 to 1.1.1.33; 2) plug both interfaces into the same broadcast domain (vlan/dumb switch/etc) –  emynd Jun 26 '13 at 18:35
    
I want everything go through the gateway(1.1.1.45 1.1.1.43). Why do I need to do (1) ? –  epema Jun 26 '13 at 19:00
1  
concept of broadcast domains is why. your carrier gave you 1.1.1.33 - 48 as a network range. This is one block. Their gear thinks that anything on said block is directly connected to them. Therefore, when a request comes in for something on that block, if their gear doesn't know about it, it sends an ARP request, which your server sees on the 1.1.1.45 interface; server doesn't reply because 1.1.1.42 isn't on that interface. In order for you to put part of this block on the other side of your device (ie: using a different interface) their router will need to know how to route to it. –  emynd Jun 26 '13 at 19:07
show 2 more comments

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.