Subject: Re: IPNAT and Pop3 problem
To: Philippe St-Jacques <h0ho@hotmail.com>
From: Manuel Bouyer <bouyer@antioche.lip6.fr>
List: tech-net
Date: 12/25/2002 19:18:02
On Mon, Dec 23, 2002 at 09:50:39PM +0000, Philippe St-Jacques wrote:
> Hi everybody. I just setup a small NetBSD router home to connect my pcs on 
> the net.
> 
> I have everything working exceping my windows outlook clients that cannot 
> fetch mails from Sympatico pop3 servers. I've been told that it's pop3 that 
> cannot pass trough ..
> 
> Here is my question. what should I change in my setup to make everyone 
> happy.
> 
> The router has 2 NICs. one for the adsl modem => ne1 - pppoe
> One for the LAN => vr0 - 10.0.0.1
> 
> My ipnat.conf looks like this:
> 
> rdr vr0 0.0.0.0/32 port smtp -> 10.0.0.1 port smtp
> rdr vr0 0.0.0.0/32 port pop3 -> 10.0.0.1 port pop3

This is wrong, you're revriting outgoing packets to 10.0.0.1.
Just remove these 2 lines.

> map pppoe0 10.0.0.0/24 -> 0.0.0.0/32 proxy port ftp ftp/tcp
> map pppoe0 10.0.0.0/24 -> 0.0.0.0/32 portmap tcp/udp 10000:40000
> map pppoe0 10.0.0.0/24 -> 0.0.0.0/32

You may want to change this to:
map pppoe0 10.0.0.0/24 -> 0.0.0.0/32 proxy port ftp ftp/tcp mssclamp 1492
map pppoe0 10.0.0.0/24 -> 0.0.0.0/32 portmap tcp/udp 10000:40000 mssclamp 1492
map pppoe0 10.0.0.0/24 -> 0.0.0.0/32

to work around potential MTU problems.

-- 
Manuel Bouyer <bouyer@antioche.eu.org>
     NetBSD: 23 ans d'experience feront toujours la difference
--