Re: Any recent changes for ipfilter/ipnat?

[Bernd Ernesti <netbsd%lists.veego.de@localhost>]

On Sun, Apr 12, 2009 at 06:34:56AM -0700, Paul Goyette wrote:
> On Sun, 12 Apr 2009, Bernd Ernesti wrote:
> 
> >You updated the nic entries in /etc/ipnat.conf, so it matches the new 
> >driver name?
> 
> Yes.  I renamed my old /etc/ifconfig.nfe0 to /etc/ifconfig.tlp0 (and 
> removed the various cksum offloads that tlp doesn't do), and I editted the 
> /etc/ipnat.conf file to change all references from nfe0 to tlp0.

Hmmm, I use the external interface in ipnat.conf and not the internal one
for the mapping a rfc1918 address.

map pppoe0 192.168.1.1/32 -> 0/32 proxy port ftp ftp/tcp mssclamp 1452
map pppoe0 192.168.1.1/32 -> 0/32 portmap tcp 15000:19999 mssclamp 1452
map pppoe0 192.168.1.1/32 -> 0/32 mssclamp 1452

You propably don't need the 'mssclamp 1452' if you don't have a lower mtu.

I assume IP forwarding is enabled.

Bernd