Subject: Re: ipnat - Please help!
To: D.Joyce <netbsd@dew-drop.com>
From: R. C. Dowdeswell <elric@mabelode.imrryr.org>
List: port-alpha
Date: 08/05/1999 15:27:56
On 933888346 seconds since the Beginning of the UNIX epoch
"D.Joyce" wrote:
>
>I really need help on this.  I'm trying to set up ipnat on my server
>with no success at all. . . here is what I have:
>=20
>-Internal 100Base-TX Network
>Intel PRO100: 192.168.129.254
>subnet mask:  255.255.255.0
>
>
>-External aDSL Internet connection (subneted by my isp)
>DEC Tulip: 206.54.133.138
>subnetmask: 255.255.255.248
>gateway: 206.54.133.137
>network: 206.54.133.136
>broadcast: 206.54.133.143
>
>my ipnat.conf reads:
>map de0 192.168.129.0/24 -> 206.54.133.138/29 portmap tcp/udp =
>10000:40000
>map de0 192.168.129.0/24 -> 206.54.133.138/29
>=20
>what am I missing?  Can this only be done with ppp?
>
>-Dave

First, is de0 your external interface?  If not it should be.  Then,
check to see if the rules are loaded:

 # /usr/sbin/ipnat -l

You should see the rules there.  You might also make sure that IPF
is enabled:

 # ipf -E

Make sure that the internal hosts are properly configured to send
packets to the NetBSD box.  (Method varies).

You could also try tcpdump on each interface to see what is really
going on.

Some other debugging info could be had from arp(8), ifconfig(8),
route(8), netstat(8).

 == Roland Dowdeswell                      http://www.Imrryr.ORG/~elric/  ==
 == The Unofficial NetBSD Web Pages        http://www.Imrryr.ORG/NetBSD/  ==
 == The NetBSD Project                            http://www.NetBSD.ORG/  ==