Subject: RE: IPFilter Config; client configuration
To: David Guynn <dguynn@geocities.com>
From: Paul Goyette <paul@whooppee.com>
List: port-mac68k
Date: 11/01/1998 08:36:24
Just execute the command
# ipf -E
as root. (Note that the -E is capital E, not lower-e)
On Sun, 1 Nov 1998, David Guynn wrote:
> Huh???
> How do I set up the ipf -e?
>
> --DAVE
>
> > -----Original Message-----
> > From: Paul Goyette [mailto:paul@whooppee.com]
> > Sent: Sunday, November 01, 1998 11:27 AM
> > To: David Guynn
> > Cc: port-i386@netbsd.org; port-mac68k@netbsd.org
> > Subject: RE: IPFilter Config; client configuration
> >
> >
> > Try running ftp in Passive mode...
> > Also, make sure you do an ipf -E to enable ipfilter and ipnat (not
> > obvious, but ipnat is "related" to ipfilter).
> >
> > On Sun, 1 Nov 1998, David Guynn wrote:
> >
> > >
> > > My ipnat.conf is set up:
> > >
> > > map ppp0 192.168.4.0/24 -> 0.0.0.0/32 portmap tcp/udp 10000:40000
> > >
> > > What else do I need?
> > >
> > >
> > > -Dave
> > > > -----Original Message-----
> > > > From: port-i386-owner@netbsd.org [mailto:port-i386-owner@netbsd.org]On
> > > > Behalf Of Paul Goyette
> > > > Sent: Sunday, November 01, 1998 10:31 AM
> > > > To: David Guynn
> > > > Cc: port-mac68k@netbsd.org; port-i386@netbsd.org
> > > > Subject: Re: IPFilter Config; client configuration
> > > >
> > > >
> > > > The problem is not on your Mac!
> > > >
> > > > The problem is that the ftp destination host, ftp.gmd.de,
> > does not know
> > > > how to get back to your Mac's address 192.168.4.3
> > > >
> > > > Unfortunately, there is really no way to "teach" ftp.gmd.de
> > how to reach
> > > > the Mac, since it's address is in RFC1918 "unroutable" (aka private)
> > > > address space.
> > > >
> > > > So, you'll need to configure ipnat on the PC so that whenever
> > it gets a
> > > > packet from 192.168.4.3 it translates that into the PC's
> > registered PPP
> > > > address. Then, ftp.gmd.de will know how to get back to your PC, and
> > > > your PC's ipnat will forward the packets back to the Mac.
> > > >
> > > > On Sun, 1 Nov 1998, David Guynn wrote:
> > > >
> > > > > Okay, i'm back.
> > > > >
> > > > > My network looks like:
> > > > >
> > > > > PPP Host
> > > > > |
> > > > > |
> > > > > NetBSD/i386 ---crossover cable--- NetBSD/mac68k
> > > > > 192.168.4.2 192.168.4.3
> > > > >
> > > > > I can telnet and ftp between the two hosts. I can ping
> > > > 192.168.4.3 and vice
> > > > > versa.
> > > > > I set up 192.168.4.2 to IPF the mac68k to PPP. So I did a
> > experiment:
> > > > >
> > > > >
> > > > > MAC68k /etc/rc.conf
> > > > >
> > > > > DEFAULTROUTE="192.168.4.2"
> > > > >
> > > > >
> > > > > So on the i386 I try to ftp ftp.gmd.de and the same on the mac.
> > > > It comes up
> > > > > on the pc but not on the mac. So how do I configure the mac?
> > > > >
> > > > > --DAVE
> > > > >
> > > > >
> > > >
> > > > ------------------------------------------------------------------
> > > > -----------
> > > > | Paul Goyette | PGP DSS Key fingerprint: | E-mail
> > > > addresses: |
> > > > | Network Engineer | BCD7 5301 9513 58A6 0DBC |
> > > > paul@whooppee.com |
> > > > | and kernel hacker | 91EB ADB1 A280 3B79 9221 |
> > > > paul.goyette@ascend.com |
> > > > ------------------------------------------------------------------
> > > > -----------
> > > >
> > >
> >
> > ------------------------------------------------------------------
> > -----------
> > | Paul Goyette | PGP DSS Key fingerprint: | E-mail
> > addresses: |
> > | Network Engineer | BCD7 5301 9513 58A6 0DBC |
> > paul@whooppee.com |
> > | and kernel hacker | 91EB ADB1 A280 3B79 9221 |
> > paul.goyette@ascend.com |
> > ------------------------------------------------------------------
> > -----------
> >
>
>
-----------------------------------------------------------------------------
| Paul Goyette | PGP DSS Key fingerprint: | E-mail addresses: |
| Network Engineer | BCD7 5301 9513 58A6 0DBC | paul@whooppee.com |
| and kernel hacker | 91EB ADB1 A280 3B79 9221 | paul.goyette@ascend.com |
-----------------------------------------------------------------------------