Subject: Re: Building a gateway
To: Eric Delcamp <e.delcamp@wanadoo.fr>
From: Greg A. Woods <woods@most.weird.com>
List: port-i386
Date: 03/17/1999 03:04:07
Given the stats from your "ipfstat" I'd guess that you don't have
"options GATEWAY" and/or "options IPFORWARDING" in your kernel, since it
would seem that absolutely no packets are being seen by IP Filter.

Check that forwarding is enabled with "sysctl net.inet.ip.forwarding".
If it's turned off (i.e. "0") then that's definitely going to cause IP
Filter's NAT to do nothing.  You should be able to enable forwarding
without recompiling the kernel though: "sysctl -w net.inet.ip.forwarding=1".

Don't forget to try "ipnat -s" too....

-- 
							Greg A. Woods

+1 416 218-0098      VE3TCP      <gwoods@acm.org>      <robohack!woods>
Planix, Inc. <woods@planix.com>; Secrets of the Weird <woods@weird.com>