We have a small address space with netmask 255.255.255.248. This leaves us only 5 usable IP addresses, so I'm trying to set up ipnat to map the addresses in a larger internal network into this range. I started with the following ruleset: map tu1 192.168.1.0/24 -> 0.0.0.0/32 proxy port ftp ftp/tcp map tu1 192.168.1.0/24 -> 0.0.0.0/32 portmap tcp/udp 40000:60000 map tu1 192.168.1.0/24 -> 0.0.0.0/32
None of the machines in the intenal network could access the external network, even though 'ipnat -l' shows mappings for connections to the external nameservers. I then tried to get one of the machines in the internal network to be visible in the external network by replacing the ruleset with just one rule: bimap tu1 192.168.1.2 -> x.x.x.x/32 Again, the gateway sees both networks as expected and 'ipnat -l' shows active mappings but nothing gets through either way. Is the machine in the internal network expected to answer to 'ping x.x.x.x' from the external network (are the ICMP packets forwarded)? I'm not sure whether the problem lies in ipnat or somewhere else as I was unable to get any routing done with gated either. The gateway is running IPFilter v4.0alpha25 on Tru64 UNIX V5.1A. - Marko
