This is a discussion on Newbie NAT question within the IPFilter forums, part of the System Security and Security Related category; --Apple-Mail-1--702409412 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; format=flowed Hi all, I'...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
--Apple-Mail-1--702409412 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; format=flowed Hi all, I've installed pfil and ipfilter on a Solaris 8 machine (2.1.4 and 4.1.3 respectively) and I'm using the following NAT rules (defined in /etc/opt/ipf/ipnat.conf): map sppp0 192.168.0.0/24 -> 0/32 proxy port ftp ftp/tcp map sppp0 192.168.0.0/24 -> 032 portmap tcp/udp 10000:40000 map sppp0 192.168.0.0/24 -> 0/32 Snooping sppp0 shows that packets from the private address space reach the PPP interface but do not seem to be translated. /etc/opt/pfil/iu.ap is: hme -1 0 pfil IP forwarding is turned on. Is there anything that I might have missed? I'm sure that it's something obvious but I'm completely unable to work out what's happening here. /opt/ipf/bin/ipmon -t yields nothing. /sbin/ipnat -l shows that my NAT rules are in place. --Apple-Mail-1--702409412 Content-Transfer-Encoding: 7bit Content-Type: text/enriched; charset=US-ASCII Hi all, I've installed pfil and ipfilter on a Solaris 8 machine (2.1.4 and 4.1.3 respectively) and I'm using the following NAT rules (defined in /etc/opt/ipf/ipnat.conf): map sppp0 192.168.0.0/24 -> 0/32 proxy port ftp ftp/tcp map sppp0 192.168.0.0/24 -> 032 portmap tcp/udp 10000:40000 map sppp0 192.168.0.0/24 -> 0/32 Snooping sppp0 shows that packets from the private address space reach the PPP interface but do not seem to be translated. /etc/opt/pfil/iu.ap is: hme -1 0 pfil IP forwarding is turned on. Is there anything that I might have missed? I'm sure that it's something obvious but I'm completely unable to work out what's happening here. <bold><fontfamily><param>Courier</param><x-tad-bigger>/opt/ipf/bin/ipmon -t yields nothing. /sbin/ipnat -l shows that my NAT rules are in place.</x-tad-bigger></fontfamily></bold> --Apple-Mail-1--702409412-- |