Subject: IPNAT problem?
To: None <netbsd-help@netbsd.org>
From: Oliver <oliverko@dialup.nacamar.de>
List: netbsd-help
Date: 11/18/1999 11:14:09
Hello,

I've installed NetBSD 1.3.2 (I know its obsolet but I will migrate if I get
the 1.4.1 version on CD). This box is intended to be a dialup server for my
other hosts.

MyISP <--> modem <--> NetBSD box (192.168.1.1) <--> ethernet <--> FreeBSD
box (192.168.1.6)

What I did:

1. patched the kernel for ipnat bug (diff-ipnat.gz)
2. recompiled the kernel with GATEWAY option
3. in rc.conf set IPFILTER to YES
4. create empty /etc/ipf.conf
5. in /etc/netstart
    if [ -f /etc/ipnat.conf ]; then
        /usr/sbin/ipnat -f /etc/ipnat.conf
    fi
6. in /etc/ipnat.conf
    map ppp0 192.168.1.0/24 -> 0.0.0.0/32 portmap tcp/udp 10000:40000
7. setup pppd with demand option
8. in rc.conf defaultroute="", ppp_peers=nacamar
9. in /etc/ppp create the file ip-up
    #!/bin/sh
    /sbin/ipf -y

If I start a ftp session to ftp.netbsd.org all works fine but if I try the
same from the FreeBSD box the NetBSD system makes a connection to my ISP but
nothing returns (no ftp login). The command ipnat -l (on dialup server)
prints:

192.168.1.6 1029    <--> 62.144.243.25 1029
192.168.1.6 1028    <--> 62.144.243.25 1028
192.168.1.6 1027    <--> 62.144.243.25 1027

Shouldn't be the ports between 10000 and 40000.

A other strange behaviour. If I make a telnet from FreeBSD to NetBSD the
NetBSD box brings up the ppp0 to the ISP. Why? The /etc/resolv.conf looks on
both systems like:

lookup file bind
domain network.de
nameserver 195.185.185.195
name server 194.162.141.17

the /etc/hosts file

192.168.1.1    a21064.network.de    a21064    (NetBSD)

192.168.1.6    k6v1fb    k6v1fb.network.de       (FreeBSD)

What could I do in order to fix the problems (maybe they are related to each
other).

thanx,
Oliver