IPNAT Not working I am an idiot

IPNAT Not working I am an idiot

Post by Neil Verklan » Thu, 23 Dec 1999 04:00:00



Hi, I've read the FAQ's and Man pages and other goodies but I'm missing
something.

My purpose here is :  Use my OpenBSD machine as a gateway for my win98
pc
Here's what I've done so far:

Upon install, I used DHCP request for my internet-connected NIC then I
turned that off
by changing the hostname.ep0 file.
The other NIC ep1 was never dynamically addressed.

the kernal switches are turned on, the ipf.rules file and ipnat.rules
file are as follows

pass in from any to any
pass out from any to any

map ep0 192.168.42.0/24 -> 24.108.47.129/32 proxy port ftp ftp/tcp
map ep0 192.168.42.0/24 -> 24.108.47.129/32 portmap tcp/udp 10000:60000
map ep0 192.168.42.0/24 -> 24.108.47.129/32

my hosts file is a little unorthodox:

# ip Address    Hostname                        Alias
#----------------------------------------------------------------

127.0.0.1       localhost
24.108.47.129   server1.powersurfr.com          server1
192.168.42.1    server1.neil.net
192.168.42.10   client1.neil.net

the pc has DNS enabled and uses the following heirarchy
192.168.42.1
dn1.internetguy.com
dn2.internetguy.com

BUT I STILL CANNOT PING THE OUTSIDE WORLD FROM THE PC WHY????

neil

 
 
 

IPNAT Not working I am an idiot

Post by erik » Thu, 23 Dec 1999 04:00:00


Route tables?


Quote:> Hi, I've read the FAQ's and Man pages and other goodies but I'm missing
> something.

> My purpose here is :  Use my OpenBSD machine as a gateway for my win98
> pc
> Here's what I've done so far:

> Upon install, I used DHCP request for my internet-connected NIC then I
> turned that off
> by changing the hostname.ep0 file.
> The other NIC ep1 was never dynamically addressed.

> the kernal switches are turned on, the ipf.rules file and ipnat.rules
> file are as follows

> pass in from any to any
> pass out from any to any

> map ep0 192.168.42.0/24 -> 24.108.47.129/32 proxy port ftp ftp/tcp
> map ep0 192.168.42.0/24 -> 24.108.47.129/32 portmap tcp/udp 10000:60000
> map ep0 192.168.42.0/24 -> 24.108.47.129/32

> my hosts file is a little unorthodox:

> # ip Address    Hostname                        Alias
> #----------------------------------------------------------------

> 127.0.0.1       localhost
> 24.108.47.129   server1.powersurfr.com          server1
> 192.168.42.1    server1.neil.net
> 192.168.42.10   client1.neil.net

> the pc has DNS enabled and uses the following heirarchy
> 192.168.42.1
> dn1.internetguy.com
> dn2.internetguy.com

> BUT I STILL CANNOT PING THE OUTSIDE WORLD FROM THE PC WHY????

> neil


 
 
 

IPNAT Not working I am an idiot

Post by Neil Verklan » Fri, 24 Dec 1999 04:00:00


Here's a bit more info on my problem. Anyone see the problem???
Routing tables

Internet:
Destination                                    Gateway
Flags         Refs    Use        Mtu  Interface
default                                            router-24-108-47-1
UGS           4        6820         -  ep0
24.108.47/24
link#1                            UC              0        0
-  ep0
router-24-108-47-1                     8:0:3e:17:5a:1c
UHL           1        0               -  ep0
server1.powersurfr                        localhost
UGHS        0        0               -  lo0
loopback
localhost                       UGRS         0        0               -  lo0

localhost
localhost                       UH             3       26               -
lo0
192.168.42/24
link#2                             UC              0        0
-  ep1
client1.neil.net                                0:0:80:80:ad:ad
UHL            0     3564            -  ep1
BASE-ADDRESS.MCAST          localhost                       URS
0        0               -  lo0


> Route tables?

 
 
 

IPNAT Not working I am an idiot

Post by Slawek Za » Fri, 24 Dec 1999 04:00:00



> map ep0 192.168.42.0/24 -> 24.108.47.129/32 portmap tcp/udp 10000:60000
> map ep0 192.168.42.0/24 -> 24.108.47.129/32

[...]

Quote:> BUT I STILL CANNOT PING THE OUTSIDE WORLD FROM THE PC WHY????

Try to reorder those two rules.
--
 "One world, one web, one program" - Microsoft Promo ad.
 "Ein Volk, Ein Reich, Ein Fuhrer" - Adolf Hitler

 
 
 

IPNAT Not working I am an idiot

Post by Neil Verklan » Fri, 24 Dec 1999 04:00:00



> Try to reorder those two rules.

Changed the order but to no avail.  I've been atempting to diagnose this
further, I have not been able to get dnsquery to find
server1.neil.net or client1.neil.net. I thought DNS would look in the hosts
file so with entiries there I thought I was okay but
I guess not.  Shoud I be setting up a cashing DNS server on the OpenBSD
machine or am I okay without?
 
 
 

IPNAT Not working I am an idiot

Post by Mari Donker » Sat, 25 Dec 1999 04:00:00



> Hi, I've read the FAQ's and Man pages and other goodies but I'm missing
> something.

> My purpose here is :  Use my OpenBSD machine as a gateway for my win98
> pc
> Here's what I've done so far:

> Upon install, I used DHCP request for my internet-connected NIC then I
> turned that off
> by changing the hostname.ep0 file.
> The other NIC ep1 was never dynamically addressed.

So ep0 is your internet connected NIC and ep1 the local one?
I think only the local NIC need be in the ipnat rules.
e.g. Try the following:

map ep1 192.168.42.0/24 -> ep1/32 portmap tcp/udp 10000:60000
map ep1 192.168.42.0/24 -> ep1/32

this is what works for me (I am sending this e-mail from my
laptop via my desktop).

Mari

 
 
 

IPNAT Not working I am an idiot

Post by Mari Donker » Sat, 25 Dec 1999 04:00:00



> So ep0 is your internet connected NIC and ep1 the local one?
> I think only the local NIC need be in the ipnat rules.
> e.g. Try the following:

> map ep1 192.168.42.0/24 -> ep1/32 portmap tcp/udp 10000:60000
> map ep1 192.168.42.0/24 -> ep1/32

> this is what works for me (I am sending this e-mail from my
> laptop via my desktop).

Whoops, mixed up my local NIC and internet connected NIC...
In the above it should read ep0 instead of ep1 and the internet
connected NIC is the one that should be in the rules instead
of the local NIC.

Mari

 
 
 

IPNAT Not working I am an idiot

Post by ironcycl » Sat, 25 Dec 1999 04:00:00


Thanks for everyones great ideas. I accuallly got DNS working fine now.
But still no internet joy. Is it possible that the 2.6 generic kernal does
not have ipf compiled in it if a FTP install is done?
 
 
 

1. ftp proxy not working with ipnat

I am running ipnat on FreeBSD 4.1-RELEASE and can't get the ftp proxy to
work. I have tried several different syntaxes, but no matter what I do,
after I connect to an ftp site, transfers of any kind fail (even an ls);
different documents list different syntax for how to use the proxy features.
I have read reports on various newsgroups that the ftp proxy is broken in
current releases of ipnat. Is this true? If anyone has this working, can you
post your ipnat rules so I can see if they will work for me? Otherwise, does
anyone have any ideas? I have tried this with a completely open ipfilter
firewall, and that doesn't help at all.

Thanks for any suggestions. Please feel free to email me directly if think
more information would be useful.

Scott

2. CAP problems...

3. ipnat on internal network not working

4. ATTN: Newbies

5. cvs and ftp not working with ipnat

6. speaker output(sound) in Unix

7. ipnat not working

8. 3 com nic

9. I am an idiot.

10. Am I just an idiot or the index page cant be in php

11. HELP - Im am a complete idiot!!

12. C++/Solaris: retrieving args from an execv() call - and I am an idiot with pointers

13. I am an admitted unix idiot-please help!