on 3/2/99 12:54 PM, Frederick Bruckman was rumored to have said...

>On Tue, 2 Mar 1999, Greg Evans wrote:
>
>> >`/usr/sbin/sysctl -w net.inet.tcp.rfc1323=0', 
>> 
>> this returned
>> 
>> net.inet.tcp.rfc1323: 1 -> 0
>> 
>> Care to explain exactly what this one is for me.....???
>
>I was afraid you'd ask that... It turns off the extension to tcp
>defined in rfc1323. Any more questions? Honestly, I don't know, 
>but without it, the nat is very slow (but it should still work).
> 
>> I believe this is where the problem lies...when I do a ipnat -l, I get:
>> 
>> List of active MAP/Redirect filters:
>> 
>> List of active sessions:
>> 
>> obviously _not_ what I should be seeing.....
>> 
>> (please send any responses to gevans@hcvn.com as I will be trying to
>> keepthe un*x box connected)
>
>OK, so what exactly do you have in /etc/ipnat.conf? And what happens
>when you type `ipnat -f /etc/ipnat.conf'?

Frederick,

my /etc/ipnat.conf contains the following

map sn0 192.168.1.0/24 -> 216.164.32.41/32 portmap tcp/udp 10000:40000
map sn0 192.168.1.0/24 -> 216.164.32.41/32