On Sat, 08 Nov 2003 10:50:16 -0600, Keith Parker
<kparker@xtechsolutions.net> wrote:
> 
> I've got RR @home service with a *Static IP*, let's call it 55.55.55.10.
> 
> I've got a RR supplied Zyxel router that serves as the gateway.
...
> When I set up the NetBSD box, I set one of the NIC's up with my static
> IP (ex0 55.55.55.10) and one of the NICs up with my private network
> address (rtk0 192.168.1.1).

You might want to reverse that.  It's not the immediate trouble, but the
3Com board has much nicer guts than the RealTek does.  If your 3Com can go
full speed on your LAN, it's the better choice for the internal interface.
 

I didn't know RR provided static addresses.  Congratulations.  

> My firewall is wide open for testing
> /etc/ipf.conf:
> pass in on any all
> pass out all
> 
> 1st /etc/ipnat.conf attempt
> map rtk0 192.168.1.1/32 -> ex0 55.55.55.10/32

You're on the right track.  Your NetBSD box can use both interfaces, but
isn't passing packet from your LAN to the Internet.  It's either not
forwarding, blocking, or not translating.  And we know it's forwarding and
not blocking, so it must not be translating.  

It's not translating because your rule is wrong.  :-)

Try:

	map ex0 192.168.1.0/24 -> 55.55.55.10/32

and enjoy the rest of your day.  

--jkl