Subject: need help making a gateway
To: None <netbsd-users@netbsd.org>
From: David W. Talmage <talmage@ricochet.net>
List: netbsd-users
Date: 11/06/2000 21:11:28
The box I want to use as a gateway refuses to pass packets from the ethernet
(ex0) to the outside world (ppp0). I think I've done all of the things
mentioned in the FAQs and the mailing lists:
o kernel has options GATEWAY, PPP_BSDCOMP, PPP_DEFLATE,
PPP_FILTER, PFIL_HOOKS, IPFILTER_LOG
o kernel has psuedo-devices bpfilter 16, ipfilter, ppp,
and a bunch of others.
o /etc/ppp/options has defaultroute.
o I have some reasonable (?) rules in my /etc/ipf.conf and
/etc/ipnat.conf.
ipfstat says that there have been no blocked packets.
Basic networking works on the gateway box. Machines on my network can talk to
each other but they can't get their packets to ppp0 on the gateway. I've
tested this using tcpdump to watch for traffic on ports 80 and 8080 (the port
of Squid, my web cache) on both interfaces
tcpdump -i ppp0 port 80 or port 8080
tcpdump -i ex0 port 80 or port 8080
and when the gateway isn't originating http traffic there is no report from
tcpdump on ppp0.
I'm missing something obvious, I betcha. I had this working once, minus ipf
and ipnat, using NetBSD 1.2 on an Amiga 3000. Now I'm on an Intel box with
1.5ALPHA but this gateway thing hasn't worked for me since 1.3. The only
difference that I can recall is that with 1.2 I had to run gated. gated isn't
mentioned in any of the FAQs that I've read or in any of the mailing list
archives, so I'm not using it. Is that what's missing?
David Talmage