Subject: Re: Building a gateway
To: Eric Delcamp <e.delcamp@wanadoo.fr>
From: Mike Pelley <mikep@winddance.net>
List: port-i386
Date: 03/16/1999 18:40:38
>I have missed something, but don't know what. I want to do a gateway
between
>my ISP with a cable modem and dynamic IP (on ep1) and my local network
>(192.168.0.xx on ep0). I have a kernel with gateway and ipfilter enable, I
>run some scripts G.Woods give to me (to setup ipf.conf and ipnat.conf with
>dynamic addressing. Work OK.), ipf and ipnat launch without error. I setup
a
>cache only DNS with named.
>From my local network, I have name resolution, but ping fail. I couldn't
>reach the "other side" of my gateway. On the gateway, ping is OK.
>Maybe should I launch some (routed | mrouted) but I'm not sure (and why ?).
>Could you help me ?


Ipnat does not pass ICMP traffic (at least on 1.3.2/i386), so ping from your
inside network to the outside won't work.  You should probably change your
connectivity test to something TCP based (telnet, http, mail, etc) instead.
BTW, the tutorial at http://radon.moof.ai.mit.edu/~armenb/ipnat.html is a
nice summary of the steps required to set up IPNat on NetBSD.

Good Luck!

Mike.