Subject: Re: LPD and NAT
To: Wojciech Bojdol <wojboj@htcon.pl>
From: David Rogers <drogers@halo7.net>
List: port-mac68k
Date: 02/21/2002 13:11:34
Here is ipnat.conf

#!/sbin/ipnat -f -
#
# THIS EXAMPLE IS WRITTEN FOR IP FILTER 3.3
#
# ae1 - (external) Ethernet connection to ISP, address a.b.c.d/24
#
# ae0 - (internal) network interface, address w.x.y.z/32
#
# If we have only 1 valid IP address from our ISP, then we do this:
#
# To make ftp work, using the internal ftp proxy, use:
#
map ae1 192.168.1.0/24 -> 0.0.0.0/32 proxy port ftp ftp/tcp

#
# For normal TCP/UDP and other IP protocols
#
map ae1 192.168.1.0/24 -> 0.0.0.0/32 portmap tcp/udp 1025:65000
map ae1 192.168.1.0/24 -> 0.0.0.0/32

And here is the output of ifconfig -a, I censored my external address as
a.b.c.d cuz I've been hacked once already this year. ;)

ae0: flags=8863<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        address: 00:00:94:22:88:30
        media: Ethernet manual
        inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
        inet6 fe80::200:94ff:fe22:8830%ae0 prefixlen 64 scopeid 0x1
ae1: flags=8863<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        address: 00:00:94:21:4e:fd
        media: Ethernet manual
        inet a.b.c.d netmask 0xfffff000 broadcast 140.88.79.255
        inet6 fe80::200:94ff:fe21:4efd%ae1 prefixlen 64 scopeid 0x2
lo0: flags=8009<UP,LOOPBACK,MULTICAST> mtu 33228
        inet 127.0.0.1 netmask 0xff000000
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
        inet6 ::1 prefixlen 128
ppp0: flags=8010<POINTOPOINT,MULTICAST> mtu 1500
ppp1: flags=8010<POINTOPOINT,MULTICAST> mtu 1500
sl0: flags=c010<POINTOPOINT,LINK2,MULTICAST> mtu 296
sl1: flags=c010<POINTOPOINT,LINK2,MULTICAST> mtu 296
tun0: flags=10<POINTOPOINT> mtu 1500
tun1: flags=10<POINTOPOINT> mtu 1500
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
gif1: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
gif2: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
gif3: flags=8010<POINTOPOINT,MULTICAST> mtu 1280


Hope this helps.

Dave Rogers
> 
> On Thu, Feb 21, 2002 at 11:49:00AM -0600, David Rogers wrote:
>> I have 2 interfaces in the machine.  And I've tried printing to both the
>> internal and the external interfaces. No luck there.
> 
> Could you show us your ipnat.conf and output of ifconfig -a ?
> 
> --wb
> 
> 
>