i have an ultra1 with opbsd 3.5 and 5 hme interfaces.
for the most part it works w/o issues, but there are some oddities that i can't explain, and i definately can't solve.
so any help will be appreciated.
let's start with the first one.
i can't connect to a host machine on a vlan from my other vlans. i get "destination is unreachable errors." the weird thing is that while i'm connected to the host machine through the serial port, i am able to ping the outside world.
i've looked at my pf rules, and it doesn't seem the problem lies there. this is what i have.
everything is where it should be in the tables.
before i go into the other odd issue, i'd like to have this one solved first.
this the route entry i get for the host machine's network
i don't know how to read that hex link and i dont know what the "u" means, and i can't seem to find the answer in the man pages.
EDIT...
i found out what the "U" means by reading the netstat man page. i cleared the route tables and rebooted, now for some odd reason i can't ping an interface of the OBSD machine from the OBSD machine itself.
wtf up with that?
EDIT....
nevermind... solved it... and it was a pathetically stupid little detail too.
for the most part it works w/o issues, but there are some oddities that i can't explain, and i definately can't solve.
so any help will be appreciated.
let's start with the first one.
i can't connect to a host machine on a vlan from my other vlans. i get "destination is unreachable errors." the weird thing is that while i'm connected to the host machine through the serial port, i am able to ping the outside world.
i've looked at my pf rules, and it doesn't seem the problem lies there. this is what i have.
# general traffic exits the 192.168.200.x inteface that is destined for the private_server
pass out quick on $pvt_svr_if inet proto tcp from { <firewall_ints>, <hosts>, <vpn_all> } to 192.168.200.2 modulate state
pass out quick on $pvt_svr_if inet proto { udp, icmp } from { <firewall_ints>, <hosts>, <vpn_all> } to 192.168.200.2 keep state
# private server restricted access to the public server
pass out quick on $pub_svr_if inet proto tcp from <private_server> to <public_server> modulate state
pass out quick on $pub_svr_if inet proto { udp, icmp } from <private_server> to <public_server> keep state
everything is where it should be in the tables.
before i go into the other odd issue, i'd like to have this one solved first.
this the route entry i get for the host machine's network
172.16.200.0 link#3 U
i don't know how to read that hex link and i dont know what the "u" means, and i can't seem to find the answer in the man pages.
EDIT...
i found out what the "U" means by reading the netstat man page. i cleared the route tables and rebooted, now for some odd reason i can't ping an interface of the OBSD machine from the OBSD machine itself.
wtf up with that?
EDIT....
nevermind... solved it... and it was a pathetically stupid little detail too.