Anyone knows how to connect to a router?

Anyone knows how to connect to a router?

Secure Home | Search | About
 Networking Firewalls    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Anyone knows how to connect to a router? Tim 10-29-2005
Posted by Tim on October 29, 2005, 1:52 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi!

I have to connect to a router to share the bandwith cause my sister moved
in, anyone know how to do this?

I'm using FreeBSD and IPFW for the firewall.

Here are the rules I wrote.

"$IPFW" add 1 set 1 check-state ip from any to any
"$IPFW" add 10 set 1 drop log all from me to any in recv eth0
"$IPFW" add 20 set 1 drop log all from 192.168.1.0/24 to any in recv eth0
"$IPFW" add 30 set 1 permit all from any to any via lo keep-state
"$IPFW" add 50 set 1 permit log tcp from me to 192.168.1.0/24 53 out setup
keep-state
"$IPFW" add 60 set 1 permit log udp from me to 192.168.1.0/24 53 out
keep-state
"$IPFW" add 70 set 1 drop log all from any to me in
"$IPFW" add 80 set 1 permit all from 192.168.1.0/24 to any keep-state
"$IPFW" add 90 set 1 drop log all from any to any
"$IPFW" add 100 set 1 drop all from any to any


For some reason I can't connect to the damn router.

I also tried with IPF

Here are the rules I came up with..
---------------
block in log body quick on eth0 from 192.168.1.1 to any
block in log body quick on eth0 from 192.168.1.0/24 to any

pass in quick on lo proto icmp from any to any keep state
pass in quick on lo proto tcp from any to any keep state
pass in quick on lo proto udp from any to any keep state
pass in quick on lo from any to any
pass out quick on lo proto icmp from any to any keep state
pass out quick on lo proto tcp from any to any keep state
pass out quick on lo proto udp from any to any keep state
pass out quick on lo from any to any

pass out log or-block body quick proto tcp from 192.168.1.1 to
192.168.1.0/24 port = 53 keep state
pass out log or-block body quick proto udp from 192.168.1.1 to
192.168.1.0/24 port = 53 keep state

block in log body quick from any to 192.168.1.1

pass in quick proto icmp from 192.168.1.0/24 to any keep state
pass in quick proto tcp from 192.168.1.0/24 to any keep state
pass in quick proto udp from 192.168.1.0/24 to any keep state
pass in quick from 192.168.1.0/24 to any
pass out quick proto icmp from 192.168.1.0/24 to any keep state
pass out quick proto tcp from 192.168.1.0/24 to any keep state
pass out quick proto udp from 192.168.1.0/24 to any keep state
pass out quick from 192.168.1.0/24 to any

block in log body quick from any to any
block out log body quick from any to any

block in quick from any to any
block out quick from any to any



Anyone knows how to fix this? I've been at this for over an hour!
Thanks......


Posted by Neil W Rickert on October 29, 2005, 6:24 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

>I have to connect to a router to share the bandwith cause my sister moved
>in, anyone know how to do this?

I will guess that router IP is 192.168.1.1.

>I'm using FreeBSD and IPFW for the firewall.

Not familiar with IPFW, although it does look as if you might
be blocking traffic from the router.

>For some reason I can't connect to the damn router.

>I also tried with IPF

>Here are the rules I came up with..
>---------------
>block in log body quick on eth0 from 192.168.1.1 to any
>block in log body quick on eth0 from 192.168.1.0/24 to any

Those would seem to drop all traffic from the router, although it
would allow external packets that are being routed.

>pass in quick proto icmp from 192.168.1.0/24 to any keep state
>pass in quick proto tcp from 192.168.1.0/24 to any keep state
>pass in quick proto udp from 192.168.1.0/24 to any keep state
>pass in quick from 192.168.1.0/24 to any

I'm not clear on what those are supposed to do. On my reading, you
already blocked those packets with the "quick" option, so they won't
reach down this far in your rules. Or do you have two interfaces, so
that the early rules only block on the wrong interface and the rules
immediately above accept on the correct interface.

Either way, you haven't given enough info for people to be able to
help.



Posted by Unruh on October 29, 2005, 7:00 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

>Hi!

>I have to connect to a router to share the bandwith cause my sister moved
>in, anyone know how to do this?

Thwo possibilities.
1) Buy asnother ethernet card for your computer. Run a line from her
computer to yours. Haveyour computer act as a masquarading forwarder for
hers. This requires your macine to be on whenever hers is.


2) install an intelligent router which will make the connections with the
ISP. You and she just plug into the ethernet ports on the router.

The router will handle all the negotiations with the ISP.


>I'm using FreeBSD and IPFW for the firewall.

>Here are the rules I wrote.

>"$IPFW" add 1 set 1 check-state ip from any to any
>"$IPFW" add 10 set 1 drop log all from me to any in recv eth0
>"$IPFW" add 20 set 1 drop log all from 192.168.1.0/24 to any in recv eth0
>"$IPFW" add 30 set 1 permit all from any to any via lo keep-state
>"$IPFW" add 50 set 1 permit log tcp from me to 192.168.1.0/24 53 out setup
>keep-state
>"$IPFW" add 60 set 1 permit log udp from me to 192.168.1.0/24 53 out
>keep-state
>"$IPFW" add 70 set 1 drop log all from any to me in
>"$IPFW" add 80 set 1 permit all from 192.168.1.0/24 to any keep-state
>"$IPFW" add 90 set 1 drop log all from any to any
>"$IPFW" add 100 set 1 drop all from any to any


>For some reason I can't connect to the damn router.

First you turn off all firewalling. You find out what address the router
uses, and connect to it with http. You set it up.
Then when you know you can talk with it, and everything works, then set up
a firewall on your own machine.


>I also tried with IPF

>Here are the rules I came up with..
>---------------
>block in log body quick on eth0 from 192.168.1.1 to any
>block in log body quick on eth0 from 192.168.1.0/24 to any
>
>pass in quick on lo proto icmp from any to any keep state
>pass in quick on lo proto tcp from any to any keep state
>pass in quick on lo proto udp from any to any keep state
>pass in quick on lo from any to any
>pass out quick on lo proto icmp from any to any keep state
>pass out quick on lo proto tcp from any to any keep state
>pass out quick on lo proto udp from any to any keep state
>pass out quick on lo from any to any
>
>pass out log or-block body quick proto tcp from 192.168.1.1 to
>192.168.1.0/24 port = 53 keep state
>pass out log or-block body quick proto udp from 192.168.1.1 to
>192.168.1.0/24 port = 53 keep state
>
>block in log body quick from any to 192.168.1.1
>
>pass in quick proto icmp from 192.168.1.0/24 to any keep state
>pass in quick proto tcp from 192.168.1.0/24 to any keep state
>pass in quick proto udp from 192.168.1.0/24 to any keep state
>pass in quick from 192.168.1.0/24 to any
>pass out quick proto icmp from 192.168.1.0/24 to any keep state
>pass out quick proto tcp from 192.168.1.0/24 to any keep state
>pass out quick proto udp from 192.168.1.0/24 to any keep state
>pass out quick from 192.168.1.0/24 to any
>
>block in log body quick from any to any
>block out log body quick from any to any
>
>block in quick from any to any
>block out quick from any to any



>Anyone knows how to fix this? I've been at this for over an hour!
>Thanks......


Posted by Volker Birk on October 30, 2005, 2:26 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> I have to connect to a router to share the bandwith cause my sister moved
> in, anyone know how to do this?
> I'm using FreeBSD and IPFW for the firewall.

If the FreeBSD box is the router, have a look on this:
http://www.erudition.net/freebsd/NAT-HOWTO

If not, please understand, that my crystal ball device is in the washer,
so I cannot find out your complete network configuration here.

The ipfw configuration does not tell me your topology and addressing.
But those two lines are suspicous:

| "$IPFW" add 10 set 1 drop log all from me to any in recv eth0
| "$IPFW" add 20 set 1 drop log all from 192.168.1.0/24 to any in recv eth0

You could read this one, though:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipfw.html

Yours,
VB.
--
"Ich bin ein freier Mensch und werde jetzt von meinen Freiheitsrechten
Gebrauch machen - und zwar ausgiebig - natürlich nur in dem Rahmen, den
Otto Schily mir noch zur Verfügung stellt."
Wolfgang Clement am 10.10.05 als Noch-Superminister


Similar ThreadsPosted
DLink 614+ wireless router & Go To My PC --- unable to connect - HELP!! December 2, 2004, 8:52 am
Sonicwall 2040 VPN Configuration - Connect to downstream router on remote side.... January 22, 2006, 3:33 pm
strange exe trying to connect February 3, 2005, 3:19 pm
Netscreen 100 can't connect October 6, 2005, 7:57 pm
FTP Connect Issues April 4, 2006, 10:08 am
should these be allowed to connect to the internet? April 18, 2005, 8:08 am
Need help with Zonealarm. Can't connect to internet December 24, 2005, 10:24 am
Help: Cant Connect to workgroup computers January 9, 2006, 7:57 am
AOL 9.0 dialup won't connect - NO firewall but AOL says so April 19, 2006, 12:38 pm
Can't connect via vpn-1 from home network to work March 11, 2005, 12:28 am

The site map in XML format XML site map

Contact Us | Privacy Policy