Re: IP translator

[Net BSD Support <bsd%blkhole.resun.com@localhost>]

On Sun, 3 Aug 1997, David Brownlee wrote:

>       You may not have installed the new copy of /dev/MAKEDEV.
>       If you have the space, running 'make distribution' from
>       /usr/src/etc is a good way to see what would get installed in
>       /dev/, /etc & friends...

I ended up pulling a complete, new copy of NetBSD-current from
NetBSD.org.  I went back to the binary distribution for 1.2D.  I
installed the new source tree in place of /usr/src.  After 5 days (a
25 MHz, '030 is *very* slow,) I've managed to re-compile and install
/usr, /sbin, /usr/bin, /usr/sbin, /usr/src/domestic, /usr/src/share &
/usr/src/gnu.  (An aside.  I tried to do this via 'cd /usr/src; make
build', which died numerous times during the generation and had to be
restarted.  I hacked the makefile so that I didn't have to start over
from scratch every time.  Even so, there appear to be some
dependencies on a pre-existing system that aren't reflected in the
makefile.  If somebody tells me the correct way to report the
problems, I'll be happy to do it.)

I went into /usr/src/etc/etc.amiga and cp'd MAKEDEV /dev/, after
backing up MAKEDEV & MAKEDEV.local.  I then 'cd /dev;sh MAKEDEV all'.
I believe that this produced all of the necessary devices.

> > My network configuration is 'ifconfig -a':
> > 
> > le0: flags=8863<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST> mtu 1500
> >     address: 00:80:10:00:16:d7
> >     media: manual status: active
> >     inet 192.156.206.1 netmask 0xffffff00 broadcast 192.156.206.255
> > lo0: flags=8009<UP,LOOPBACK,MULTICAST> mtu 32768
> >     inet 127.0.0.1 netmask 0xff000000 
> > sl0: flags=c010<POINTOPOINT,LINK2,MULTICAST> mtu 296
> > sl1: flags=c010<POINTOPOINT,LINK2,MULTICAST> mtu 296
> > sl2: flags=c010<POINTOPOINT,LINK2,MULTICAST> mtu 296
> > ppp0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500
> >     inet 204.245.6.188 --> 204.245.6.2 netmask 0xffffff00 
> > ppp1: flags=8010<POINTOPOINT,MULTICAST> mtu 1500
> > ppp2: flags=8010<POINTOPOINT,MULTICAST> mtu 1500
> > 
> > Note: I am the registered owner of 192.156.206.00.

The network configuration hasn't changed.

> > Other machines are Macintoshes running MacTCP.  The gateway on them is
> > set to 192.156.206.1.
> > 
> > >   e) On the gateway:
> > >      Create an /etc/ipnat.conf file:
> > >      map EXT 10.0.0.0/8 -> X.X.X.X/32 portmap tcp/udp 10000:20000
> > >           (Where EXT is your external (to the world) network interface,
> > >            'ppp0' for a modem over ppp, otherwise sn0, or le0 etc)
> > >           (X.X.X.X is the address of your EXT interface,)
> > >      Run 'ipnat -f /etc/ipnat.conf'.
> > 
> > Done.  ipnat -l shows:
> > 
> > List of active MAP/Redirect filters:
> > map ppp0 192.156.206.0/24  -> 204.245.6.188/32  portmap tcp/udp 10000:20000
> > 
> > List of active sessions:
> > 

[...]

> > iptest -d ppp0 -s 192.156.206.3 -g 192.156.206.1 -4 primenet.com which
> > gave:
> > 
>       Definitely sounds unhappy - if you didnt build the world via a
>       'make distribution' from /usr/src/etc, or a 'make build' from
>       /usr/src, then you may have problems with mismatched include
>       files and other wierdness.
>       If you have done a make build, and copied the latest version of
>       MAKEDEV, then we have to look further! :/

This gave the same errors as before.  However, I used:

        arp 192.156.206.1 00:80:10:00:16:d7 pub

Note that I had to use the 'pub' option, as the system complained that
it could only proxy for that address.  (Unfortunately, I'm having to
learn a lot about network protocols in the process.  I can't see why
'arp' complains, other than the fact that there are at least two
addresses for this machine:  192.156.206.1=le0 & 204.245.6.188=ppp0.)
With that entry added, at least the tests no longer fail for an arp
problem.

I'm probably suffering from some obvious configuration problem, but
haven't been able to track it down yet.

netstat -nr shows:

Routing tables

Internet:
Destination        Gateway            Flags     Refs     Use    Mtu  Interface
default            204.245.6.2        UG          3      245      -  ppp0
127.0.0.1          127.0.0.1          UH          1        0      -  lo0
192.156.206        link#1             UC          0        0      -  le0
192.156.206.1      127.0.0.1          UGHS        2       80      -  lo0
192.156.206.1      00:80:10:00:16:d7  UHLS2       0        0      -  lo0
192.156.206.3      00:80:19:0b:0e:4b  UHL         1       23      -  le0
204.245.6.2        204.245.6.188      UH          1        0      -  ppp0


arp -a shows:

blkhole.resun.com (192.156.206.1) at 00:80:10:00:16:d7 permanent published 
(proxy only)
unicorn.resun.com (192.156.206.3) at 00:80:19:0b:0e:4b

ipnat -l shows:

List of active MAP/Redirect filters:
map ppp0 192.156.206.0/24  -> 204.245.6.188/32  portmap tcp/udp 10000:20000

List of active sessions:

-----

When I run the iptests, they seem to be working, with the exception of
a report that there is no table space available for some of them.

When I go to the 192.156.206.3 machine and attempt to telnet to
205.245.6.2, (or anywhere else on the net, for that matter,) the
connection fails to open.

So close, and yet so far.  Sigh.

Any clues or other hints would be greatly appreciated.
-- 
  Don Phillips         bsd%blkhole.resun.com@localhost
  Research Unlimited
  Escondido, Calif.    My opinions are just that, and no more.