Subject: Re: Need help on rdr / IPNAT
To: None <netbsd-help@netbsd.org>
From: Henry Nelson <henry@irm.nara.kindai.ac.jp>
List: netbsd-help
Date: 12/12/2000 11:18:24
> I have the firewall running on NetBSD 1.4.2 which is pre-configured by
> http://www.dubbele.com . Thanks to dubbele techs for that.

"Pre-configured" means that you must understand and consistently use
the configuration that is installed.  For me that was more difficult
than just installing my own configuration from scratch.

> rdr ne2 XX.XX.XX.XX/32 port 80 -> 192.168.1.104 port 8080 tcp
                      ^^                               ^^^^
Try "rdr ne2 XX.XX.XX.XX/0 port 80 -> 192.168.1.104 port 80 tcp".
Changing that "/32" to "/0" is what got me going.  (See below about 8080.)

Please, can anyone explain why that must be "/0" and not "/32"?  TIA.

> gateway_enable=3D"YES"

I hope these "=3D" are only an artifact of your mailer.  In the respective
rc.* files they must be ascii "=".

> I am not sure that how do i make sure that port 80 on firewall m/c is =
> open.
> I checked /etc/services , line for port 80 is not commented.

But you have port 8080 set to receive http redirection.  I have port 80
set in ipnat.conf, so the default in /etc/services is not affected.  If
you really want to use 8080 for your server or a web proxy, then you'll
have to set up something to listen on that port and have it listed in
/etc/services, AFAIK.

Hope it helps.

henry nelson