You have forgot IPNAT address translation. The 192.168.* networks are
never routed by ordinary routers (like the 10.* network and the
172.something.* network).

Check ipnat(8) and ipnat.conf(5) man pages.

If the interface on 194.198.117.16 is ex0, these two ipnat.conf lines
should work for you:

map ex0 192.168.117.0/24 -> 194.198.117.16/32 portmap tcp/udp
1025:65000
map ex0 192.168.117.0/24 -> 194.198.117.16/32=20

Anders

On Mon, 20 Jul 1998 10:20:06 +0200 (CEST), you wrote:
>Hello,
>
>I have a problem with IP-forwarding on my computer running NetBSD
>1.3.2.
>
>My computer has two network interfaces, the first interface has subnet
>194.198.117.16/28 and the second subnet 192.168.117.  The problem is
>that I cannot reach a host on the first subnet from a host on the
>second net.
>
>The routing table on the computer with dual ethernet-cards look like
>this:
>
>Destination        Gateway            Flags     Refs     Use    Mtu  =
Interface
>default            194.198.117.17     UGS         1    90625      -  ep0
>127.0.0.1          127.0.0.1          UH          0       21      -  lo0
>192.168.117        link#2             UC          0        0      -  ep1
>192.168.117.23     00:a0:24:f2:30:23  UHL         4      311      -  ep1
>194.198.117.16/28  link#1             UC          0        0      -  ep0
>194.198.117.17     00:e0:1e:5f:85:24  UHL         1        0      -  ep0
>194.198.117.18     00:60:08:74:6d:10  UHL         0       50      -  lo0
>194.198.117.19     00:00:21:60:53:39  UHL         1     2013      -  ep0
>194.198.117.23     00:a0:24:f2:30:23  UHL         0   399151      -  ep0
>
>Then, when I try to run traceroute on a computer on subnet
>192.168.117, this happends:
>
># traceroute 194.198.117.19
>traceroute to 194.198.117.19 (194.198.117.19), 30 hops max, 40 byte =
packets
> 1  haiti-gw (192.168.117.18)  0.648 ms  0.428 ms  0.400 ms
> 2  * * *
>
>Does anyone has an idea why packets are not forwarded?  The kernel has
>options GATEWAY and IPFORWARDING enabled, so the computer should do
>IP-forwarding.  But is does not.
>
>-ds