The version of IPFilter that comes with Solaris 10? Yeah it's very broken with NAT. We had to upgrade to latest for it to work.

I was disappointed to see Sun didn't upgrade it for 1/06. I understand the arguments in a previous thread, but it's already unusable..

Lund

adapto wrote:
Hi *,
maybe someone can help me on this problem. My network looks like this:

                                             Client 192.168.1.2
                                                /
INTERNET - hme0 <-> hme1 (192.168.1.1)
                                                \
                                            Client 192.168.1.3

I can connect to www without problems from my sun box(router) but the clients are not routed. The IP's will not be translated. Then I ping to the outside world from the clients I see following on the two interfaces:
hme1: 192.168.1.2 > outside.com
hme0(sppp0): 192.168.1.2 > outside.com (I think this have to look like: hme0.ip > outside.com )

But it seems that no pakets leave my network, cause then I capture at outside.com I dont get any pakets.

The setup is created simple:

“/ets/ipf/ipf.conf”
pass   in  all
pass  out  all

“/etc/ipf/ipnat.conf”
map sppp0 192.168.1.0/24 -> 0/32

routeadm -e ipv4_forwarding

/etc/hostname.hme1

"/etc/ppp/options"
plink

"/etc/ppp/pfil.ap"
hme    -1      0       pfil
sppp    -1      0       pfil

Thanks for your help and ideas...
Greetings Aleksander





--
Jorgen Lundman       | <[EMAIL PROTECTED]>
Unix Administrator   | +81 (0)3 -5456-2687 ext 1017 (work)
Shibuya-ku, Tokyo    | +81 (0)90-5578-8500          (cell)
Japan                | +81 (0)3 -3375-1767          (home)

Reply via email to