Subject: RE: NAT Trouble
To: 'Scott Bartram' <scottb@orionsoft.com>
From: Calvin Vette (IT- Borders Online) <CVETTE@borders.com>
List: port-i386
Date: 10/22/1998 13:59:44
I had a similar problem with 1.3.1/1.3.2 with a cable modem and an internal
Ethernet network. I just upgraded to current, but haven't finished the
configuration yet. Is the patch you're talking about included in
current-981008?

> ----------
> From: 	Scott Bartram[SMTP:scottb@orionsoft.com]
> Sent: 	Thursday, October 22, 1998 1:24 PM
> To: 	James Snow
> Cc: 	port-i386@netbsd.org
> Subject: 	Re: NAT Trouble
> 
> 
> Is your setup such that outbound packets are sent via the PPP (serial
> port) link and inbound packets are received on the cable modem? If so, you
> need to patch the NAT code in the kernel. Let me know what version of
> NetBSD you're running and I'll send you a patch.
> 
> scott
> 
> On Thu, 22 Oct 1998, James Snow wrote:
> 
> > 
> > Thanks to everyone who helped me with my com port/modem problem. I've
> > subsequently set up PPP without a hitch, but following the directions
> for
> > NAT has got me stumped.
> > 
> > I've got ipfilter compiled into the kernel., and I have it enabled in
> > /etc/rc.conf. I have an empty /etc/ipf.conf, the following in
> > /etc/netstart.local:
> > 
> >    if [ -f /etc/ipnat.conf ]; then
> >                   echo 'starting IP network address translation
> (ipnat)...';
> >                   /usr/sbin/ipnat -f /etc/ipnat.conf
> >         fi
> > 
> > and the following in /etc/ipnat.conf:
> > 
> > map ppp0 10.0.0.0/24 -> 0/32 portmap tcp/udp 40000:60000
> > map ppp0 10.0.0.0/24 -> 0/32
> > 
> > I'm a little confused about those numbers following the portmap command.
> > Do they represent the range of ports that the machine will resend NATed
> > packets from or the range of ports that a packet to be NATed must be
> > coming from?
> > 
> > Back to the NAT problem though, with the above setup and one of the
> other
> > machines here set to use the NetBSD box as its gateway, nothing happens.
> > The output of ipnat -ls remains as follows:
> > 
> > mapped  in      0       out     0
> > added   0       expired 0
> > inuse   0
> > rules   2
> > List of active MAP/Redirect filters:
> > map ppp0 10.0.0.0/24  -> 0.0.0.0/32  portmap tcp/udp 40000:60000
> > map ppp0 10.0.0.0/24  -> 0.0.0.0/32 
> > 
> > List of active sessions:
> > 
> > I can verify with tcpdump that the client machine is indeed making
> > requests and they are making it to the gateway, but the NAT doesn't seem
> > to see tem at all.
> > 
> > Anyone have any ideas?
> > 
> > 
> > Thanks in advance,
> > James Snow
>