Subject: ipfiltering problems
To: netbsd-users <netbsd-users@netbsd.org>
From: Dan Radom <dradom@redback.com>
List: netbsd-users
Date: 12/29/2000 21:55:29
I'm having a little trouble with ipfiltering.  The nat box is i386 running
1.5, and ex0 is external and le0 is internal.  Here are my ipf.conf and
ipnat.conf files.  There's not too much to them...

[graffix@pluto graffix]$ cat /etc/ipnat.conf
map ex0 192.168.0.0/24 -> 24.19.63.204/32 proxy port ftp ftp/tcp
map ex0 192.168.0.0/24 -> 24.19.63.204/32 portmap tcp/udp 30000:60000
map ex0 192.168.0.0/24 -> 24.19.63.204/32


[graffix@pluto graffix]$ cat /etc/ipf.conf
pass in all
pass out all


My problem is this.  Everything works fine with the exception of http
traffic.  It will stall, timeout or run very slowly (1 or 2 K/sec or
slower).  I get an average of about 200 K/sec generally.

Thanks in advance,

Dan