Subject: Re: Firewall/Router
To: Ron Landrus <ronlandrus@yahoo.com>
From: Daniel Parks <danielp@reed.edu>
List: port-mac68k
Date: 03/06/2001 15:48:45
At 12:24 PM -0800 3/6/2001, Ron Landrus wrote:
>My next issue is that from the router machine (iici
>and asante nic cards) I can telnet, ping, & http the
>internet, from another macos computer I can ping the
>router but it will not pass any packets to the
>internet for me.

Someone else mentioned that you should check your netmasks. You need 
to make sure that your /etc/ipnat.conf file contains the right info 
for your network:

My /etc/ipnat.conf file contains the following:
#Basic for non-static IPs on external I/F ae1
map ae1 192.168.1.0/24 -> 0.0.0.0/32 proxy port ftp ftp/tcp
map ae1 192.168.1.0/24 -> 0.0.0.0/32 portmap tcp/udp 10000:40000

ae1 is the interface toward the internet, ae0 (and the 192.168.1.* 
network) is internal, my home network.

Perhaps you have the wrong information about your home network entered?

That you can ping the router is a good sign... it means that your 
netmask is entered correctly in /etc/ifconfig.* (if you configure 
your interfaces that way...)

I doubt this is a problem with the kernel, as you said you installed 
Erik Winkler's.

Hope this helps,
Daniel