Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 23 Oct 2000 10:08:45 +0800
From:      marcus.lam@coresolutions.com
To:        freebsd-questions@FreeBSD.ORG
Subject:   PPP NAT problems
Message-ID:  <OF073CF694.DF282BE1-ON48256981.000AAFD3@coresolutions.com>

next in thread | raw e-mail | index | archive | help
This is a multipart message in MIME format.
--=_alternative 000B855B48256981_=
Content-Type: text/plain; charset="us-ascii"

Hello,

I have a FreeBSD box set up with PPPoE set up and it's running fine. no 
problem.

Now I want to share this connection with other NT boxes I have. For some 
reason I can ping from a NT box to the outside world but I cannot get real 
connection, let's say a HTTP connection, to the outside world.

I am using ipfilter for NAT purposes.  And the configuration is like this:
==========================================================================
map tun0 192.168.0.0/16 -> 0.0.0.0/32 portmap tcp/udp 40000:65000
map tun0 192.168.0.0/16 -> 0.0.0.0/32

and for ipfilter I set this:
==========================================
pass in quick proto tcp all keep state
pass out quick proto tcp all keep state


Now on a NT box (192.168.0.50) I can ping, say, www.oracle.com 
successfully but when I use a browser to access www.oracle.com it never 
returns. I noticed there is actually traffic thru the DSL modem but the 
result never reach back to the NT box, is it a routing issue or some other 
settings I forgot? 

here is a dump of the routing table on the FreeBSD box
================================================================
Destination       Gateway           Flags    ...   Netif  Expire
default           192.168.64.1      UGSc           tun0
10                link#1            UC             xl0    =>
127.0.0.1         127.0.0.1         UH             lo0
192.168           link#2            UC             rl0    =>
192.168.0.50      link#2            UHLW           rl0    =>
192.168.64.1      203.169.162.137   UH             tun0


Thanks.

--------------------------------------------------------------------
Marcus Lam (marcus.lam@coresolutions.com)

--=_alternative 000B855B48256981_=
Content-Type: text/html; charset="us-ascii"


<br><font size=2 face="Courier New">Hello,</font>
<br>
<br><font size=2 face="Courier New">I have a FreeBSD box set up with PPPoE set up and it's running fine. no problem.</font>
<br>
<br><font size=2 face="Courier New">Now I want to share this connection with other NT boxes I have. For some reason I can ping from a NT box to the outside world but I cannot get real connection, let's say a HTTP connection, to the outside world.</font>
<br>
<br><font size=2 face="Courier New">I am using ipfilter for NAT purposes. &nbsp;And the configuration is like this:</font>
<br><font size=2 face="Courier New">==========================================================================</font>
<br><font size=2 face="Courier New">map tun0 192.168.0.0/16 -&gt; 0.0.0.0/32 portmap tcp/udp 40000:65000</font>
<br><font size=2 face="Courier New">map tun0 192.168.0.0/16 -&gt; 0.0.0.0/32</font>
<br>
<br><font size=2 face="Courier New">and for ipfilter I set this:</font>
<br><font size=2 face="Courier New">==========================================</font>
<br><font size=2 face="Courier New">pass in quick proto tcp all keep state</font>
<br><font size=2 face="Courier New">pass out quick proto tcp all keep state</font>
<br>
<br>
<br><font size=2 face="Courier New">Now on a NT box (192.168.0.50) I can ping, say, www.oracle.com successfully but when I use a browser to access www.oracle.com it never returns. I noticed there is actually traffic thru the DSL modem but the result never reach back to the NT box, is it a routing issue or some other settings I forgot? &nbsp;</font>
<br>
<br><font size=2 face="Courier New">here is a dump of the routing table on the FreeBSD box</font>
<br><font size=2 face="Courier New">================================================================</font>
<br><font size=2 face="Courier New">Destination &nbsp; &nbsp; &nbsp; Gateway &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Flags &nbsp; &nbsp;... &nbsp; Netif &nbsp;Expire</font>
<br><font size=2 face="Courier New">default &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 192.168.64.1 &nbsp; &nbsp; &nbsp;UGSc &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; tun0</font>
<br><font size=2 face="Courier New">10 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;link#1 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;UC &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; xl0 &nbsp; &nbsp;=&gt;</font>
<br><font size=2 face="Courier New">127.0.0.1 &nbsp; &nbsp; &nbsp; &nbsp; 127.0.0.1 &nbsp; &nbsp; &nbsp; &nbsp; UH &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; lo0</font>
<br><font size=2 face="Courier New">192.168 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; link#2 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;UC &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; rl0 &nbsp; &nbsp;=&gt;</font>
<br><font size=2 face="Courier New">192.168.0.50 &nbsp; &nbsp; &nbsp;link#2 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;UHLW &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; rl0 &nbsp; &nbsp;=&gt;</font>
<br><font size=2 face="Courier New">192.168.64.1 &nbsp; &nbsp; &nbsp;203.169.162.137 &nbsp; UH &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; tun0</font>
<br>
<br>
<br><font size=2 face="Courier New">Thanks.</font>
<br><font size=2 face="Courier New"><br>
--------------------------------------------------------------------<br>
Marcus Lam (marcus.lam@coresolutions.com)<br>
</font>
--=_alternative 000B855B48256981_=--


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?OF073CF694.DF282BE1-ON48256981.000AAFD3>