Subject: Re: receiving inbound IP packets through gateway
To: Kmicic <kmicic@earthlink.net>
From: Mirko Thiesen <thiesi@ReLink.NetWork23.BSDOnLine.ORG>
List: netbsd-help
Date: 03/01/2000 00:01:08
This is a cryptographically signed message in MIME format.

--------------msA40965BF65178499412F6A72
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

Kmicic wrote:
>
> Mirko Thiesen wrote:
> 
> > The problem arises when I try to connect to the Intenet from CyberDyne:
> > I see ReLink dialing out and establishing a connection with my ISP as
> > usual. But regardless of the service I'm trying to use, I don't receive
> > any answer. Nothing. I can ping ReLink and BrainScape from CyberDyne
> > (and vice-versa), so I think my local network is set up corrcetly
> > (ReLink also acts as a caching-only nameserver and has some filesystems
> > exported to CyberDyne). But all Internet sites produce an output like
> > this:
>
> Did you set up an entry for CD in ipnat.conf?
> Did you try "ipf -y" to re-sync the tables?
> Just a thought.

Yes, I did. I had added CyberDyne's network to ipnat.conf already.  But,
to my own surprise, I figured out some real strange behaviour: It's not
really all Internet sites that I don't receive any response from, it's
just some of them. So it's the SETI@Home client which is unable to
connect to its server, and I can't ping www.bauarbeiter.de either, but I
*can* ping www.amiga.de. Strange, isn't ir? I also found out that it
must have something to do with my (caching only) nameserver on ReLink,
as it seems to be gethostbyname(3) which fails. At least this is what
the SETI@Home client says. A simple nslookuop whatever either doesn't
work from CyberDyne, so it is very likeley that CybderDyne in some cases
doesn't know how to contact the nameserver on ReLink or that it has to
contact ReLink's nameserver at all. All this nameserver stuff works very
well from ReLink itself and also from my Win98 box connected to ReLink
(which also uses ReLink for all the name resolution stuff).

I understand that the things I'm looking for are probably in
"nsswitch.conf", as this is the file where I configure all this
resolving behaviour. Maybe this is where I made the mistake ... What do
I have to take care of? I'm using NIS and have my nsswitch.conf set up
this way (i.e. to use NIS whenever possible, as this minmizes
maintenance effort I believe).

Bye, K&K,
T-Zee
-- 
Thiesi@I.am * Powered by NetBSD! * Amiga: Alive and Kicking!
Fon: ++49-(0)171-416 05 09     Fax: ++49-(0)171-134 16 05 09
Mirko Thiesen, P.O. Box 26 03 54, D-13413 Berlin, W. Germany
             "We´re with you all the way, mostly"
--------------msA40965BF65178499412F6A72
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------msA40965BF65178499412F6A72--