• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

OBSD routing nightmares

xyyz

Diamond Member
i have an ultra1 with opbsd 3.5 and 5 hme interfaces.

for the most part it works w/o issues, but there are some oddities that i can't explain, and i definately can't solve.

so any help will be appreciated.

let's start with the first one.

i can't connect to a host machine on a vlan from my other vlans. i get "destination is unreachable errors." the weird thing is that while i'm connected to the host machine through the serial port, i am able to ping the outside world.

i've looked at my pf rules, and it doesn't seem the problem lies there. this is what i have.

# general traffic exits the 192.168.200.x inteface that is destined for the private_server
pass out quick on $pvt_svr_if inet proto tcp from { <firewall_ints>, <hosts>, <vpn_all> } to 192.168.200.2 modulate state
pass out quick on $pvt_svr_if inet proto { udp, icmp } from { <firewall_ints>, <hosts>, <vpn_all> } to 192.168.200.2 keep state

# private server restricted access to the public server
pass out quick on $pub_svr_if inet proto tcp from <private_server> to <public_server> modulate state
pass out quick on $pub_svr_if inet proto { udp, icmp } from <private_server> to <public_server> keep state

everything is where it should be in the tables.

before i go into the other odd issue, i'd like to have this one solved first.

this the route entry i get for the host machine's network

172.16.200.0 link#3 U

i don't know how to read that hex link and i dont know what the "u" means, and i can't seem to find the answer in the man pages.


EDIT...

i found out what the "U" means by reading the netstat man page. i cleared the route tables and rebooted, now for some odd reason i can't ping an interface of the OBSD machine from the OBSD machine itself.

wtf up with that?


EDIT....

nevermind... solved it... and it was a pathetically stupid little detail too.
 
Back
Top