Newbie NAT question

This is a discussion on Newbie NAT question within the IPFilter forums, part of the System Security and Security Related category; --Apple-Mail-1--702409412 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; format=flowed Hi all, I'...


Go Back   Usenet Forums > System Security and Security Related > IPFilter

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 12-04-2004
Jonathan
 
Posts: n/a
Default Newbie NAT question


--Apple-Mail-1--702409412
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
charset=US-ASCII;
format=flowed

Hi all,

I've installed pfil and ipfilter on a Solaris 8 machine (2.1.4 and
4.1.3 respectively) and I'm using the following NAT rules (defined in
/etc/opt/ipf/ipnat.conf):

map sppp0 192.168.0.0/24 -> 0/32 proxy port ftp ftp/tcp
map sppp0 192.168.0.0/24 -> 032 portmap tcp/udp 10000:40000
map sppp0 192.168.0.0/24 -> 0/32

Snooping sppp0 shows that packets from the private address space reach
the PPP interface but do not seem to be translated.

/etc/opt/pfil/iu.ap is:

hme -1 0 pfil

IP forwarding is turned on.

Is there anything that I might have missed? I'm sure that it's
something obvious but I'm completely unable to work out what's
happening here.

/opt/ipf/bin/ipmon -t yields nothing.
/sbin/ipnat -l shows that my NAT rules are in place.
--Apple-Mail-1--702409412
Content-Transfer-Encoding: 7bit
Content-Type: text/enriched;
charset=US-ASCII

Hi all,


I've installed pfil and ipfilter on a Solaris 8 machine (2.1.4 and
4.1.3 respectively) and I'm using the following NAT rules (defined in
/etc/opt/ipf/ipnat.conf):


map sppp0 192.168.0.0/24 -> 0/32 proxy port ftp ftp/tcp

map sppp0 192.168.0.0/24 -> 032 portmap tcp/udp 10000:40000

map sppp0 192.168.0.0/24 -> 0/32


Snooping sppp0 shows that packets from the private address space reach
the PPP interface but do not seem to be translated.


/etc/opt/pfil/iu.ap is:


hme -1 0 pfil


IP forwarding is turned on.


Is there anything that I might have missed? I'm sure that it's
something obvious but I'm completely unable to work out what's
happening here.


<bold><fontfamily><param>Courier</param><x-tad-bigger>/opt/ipf/bin/ipmon
-t yields nothing.

/sbin/ipnat -l shows that my NAT rules are in place.</x-tad-bigger></fontfamily></bold>
--Apple-Mail-1--702409412--

Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 10:43 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0