Subject: Re: pppoe and ipnat (yet another question)
To: Andrew Gillham <gillham@vaultron.com>
From: Sean Finney <seanius@seanius.net>
List: current-users
Date: 03/01/2002 12:57:13
On Fri, Mar 01, 2002 at 09:10:35AM -0800, Andrew Gillham wrote:
> Base on /usr/share/examples/ipf/mediaone:
> map pppoe0 192.168.0.0/24 -> 0/32 proxy port ftp ftp/tcp
> map pppoe0 192.168.0.0/24 -> 0/32 portmap tcp/udp 1024:65535
> map pppoe0 192.168.0.0/24 -> 0/32

here's my /etc/ipnat.conf:
map pppoe0 192.168.0.0/24 -> 0/32 portmap tcp/udp 40000:60000 
map pppoe0 192.168.0.0/24 -> 0/32 proxy port ftp ftp/tcp
map pppoe0 192.168.0.0/24 -> 0/32

...which still doesn't work.  is there anything else I should do?  Are there
any specific rules I should be passing to route?  Is there something I should
or shouldn't be doing on the router-side rtk device?

btw, to make sure everything's kosher in the LAN, I'm trying both with a linux
box and a dumb MS laptop with all network stuff set to automatic to make sure
that I didn't inadvertently mess something up there :).  They all have the
correct entries for default gw, dns servers, et c...

--sean
> 
> You're telling it to do a one-to-one map of 192.168.0.0/24 into whatever
> is on ppoe0 as a /16, so you end up trying to use up to a /24 of address
> space from the subnet on your pppoe0 interface.  You are really wanting
> it to do port address translation (PAT or PNAT) on a single ip address.
> 
> I'm using this with a 'vlan0' interface and everything is great. :)
> 
> -Andrew
>