Subject: need help making a gateway
To: None <netbsd-users@netbsd.org>
From: David W. Talmage <talmage@ricochet.net>
List: netbsd-users
Date: 11/06/2000 21:11:28
The box I want to use as a gateway refuses to pass packets from the ethernet 
(ex0) to the outside world (ppp0).  I think I've done all of the things 
mentioned in the FAQs and the mailing lists:

	o kernel has options GATEWAY, PPP_BSDCOMP, PPP_DEFLATE, 
	PPP_FILTER, PFIL_HOOKS, IPFILTER_LOG

	o kernel has psuedo-devices bpfilter 16, ipfilter, ppp, 
	and a bunch of others. 

	o /etc/ppp/options has defaultroute.

	o I have some reasonable (?) rules in my /etc/ipf.conf and
	 /etc/ipnat.conf.  

ipfstat says that there have been no blocked packets.

Basic networking works on the gateway box.  Machines on my network can talk to 
each other but they can't get their packets to ppp0 on the gateway.  I've 
tested this using tcpdump to watch for traffic on ports 80 and 8080 (the port 
of Squid, my web cache) on both interfaces

	tcpdump -i ppp0 port 80 or port 8080
	tcpdump -i ex0 port 80 or port 8080

and when the gateway isn't originating http traffic there is no report from 
tcpdump on ppp0.

I'm missing something obvious, I betcha.  I had this working once, minus ipf 
and ipnat, using NetBSD 1.2 on an Amiga 3000.  Now I'm on an Intel box with 
1.5ALPHA but this gateway thing hasn't worked for me since 1.3.  The only 
difference that I can recall is that with 1.2 I had to run gated.  gated isn't 
mentioned in any of the FAQs that I've read or in any of the mailing list 
archives, so I'm not using it.  Is that what's missing?


David Talmage