Subject: Re: Setting up ipnat with NetBSD and OSX
To: Andrew Gillham <gillham@vaultron.com>
From: Ian P. Thomas <ipthomas_77@yahoo.com>
List: netbsd-users
Date: 12/28/2001 19:56:13
On Friday 28 December 2001 06:56 pm, you wrote:
> On Fri, Dec 28, 2001 at 06:03:04PM -0500, Ian P. Thomas wrote:
> > The output of netstat -nr on the NetBSD box
> > Internet:
> > Destination Gateway Flags Refs Use Mtu
> > Interface default 128.205.200.79 UGS 1
> > 338 1524 ppp0 127 127.0.0.1 UGRS
> > 0 0 33228 lo0 127.0.0.1 127.0.0.1 UH
> > 1 0 33228 lo0 128.205.200.79 128.205.233.70
> > UH 1 0 1524 ppp0 192.168.3 link#1
> > UC 1 0 1500 fxp0
>
> This looks ok to me.
>
> > The output of ipnat -l
> > List of active MAP/Redirect filters:
> > map ppp0 192.168.3.0/24 -> 0.0.0.0/32 proxy port ftp ftp/tcp
> > map ppp0 192.168.3.0/24 -> 0.0.0.0/32 portmap tcp/udp 40000:60000
> > map ppp0 192.168.3.0/24 -> 0.0.0.0/32
>
> On my /etc/ipnat.conf rules I use '0/32' instead of '0.0.0.0/32', but
> I don't think that matters.
>
> > fxp0:
> > flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
> > address: 00:02:b3:1a:b2:81
> > media: Ethernet autoselect (100baseTX full-duplex)
> > status: active
> > inet 192.168.3.1 netmask 0xffffff00 broadcast 192.168.3.255
> > inet6 fe80::202:b3ff:fe1a:b281%fxp0 prefixlen 64 scopeid
> > 0x1
>
> This looks fine also.
>
> > Darwin's netstat -nr. I sshed in to get it.
> > Internet:
> > Destination Gateway Flags Refs Use
> > Netif Expire default 192.168.3.1 UGSc 1
> > 0 en0 127.0.0.1 127.0.0.1 UH 5
> > 1467 lo0 192.168.3 link#2 UC
> > 0 0 en0 192.168.3.1 0:2:b3:1a:b2:81 UHLW
> > 3 673 en0 1030 192.168.3.2 0:3:93:4c:52:5e
> > UHLW 0 8 lo0
>
> This looks odd to me, since the default route has zero "Use", and
> there should be packets when you try to ping something out on the
> internet. E.g. if you send five pings to www.yahoo.com, the 'Use'
> counter should increase by five, whether you get a response or now.
> Your netmask is ok on the Mac right? 255.255.255.0 not 0.0.0.0?
>
> > Am I missing something obvious or is Mac OSX just a little odd?
>
> Well, as long as net.inet.ip.forwarding=1, you aren't. :)
>
> You might want to do this on your NetBSD box:
> tcpdump -nvvi fxp0 icmp
>
> Then try to ping from the Mac and confirm whether you are seeing the
> right packets.
>
> -Andrew
I did as asked and it looks like the right packets are being seen.
19:29:56.964900 192.168.3.2 > 192.168.3.1: icmp: echo request (ttl 255,
id 2406)19:29:56.965027 192.168.3.1 > 192.168.3.2: icmp: echo reply
(ttl 255, id 8111)
I think this is a problem with name resolution. I'm able to
successfully ping yahoo from the Mac if I use there IP address. There
is a spot in the TCP/IP part of the Network setup that asks for DNS
servers or optionally search domain. Should I add something there?
I've tried adding my DNS servers that I use on the NetBSD box, but that
doesn't work.
I think the solution is close. I'm going to look around on Apple's
site for some more documentation. It's like OSX wants to be like BSD,
but it's just not there yet :))
Ian
--
Of Cource it Runs NetBSD
www.netbsd.org
_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com