ipnat and http traffic

[Jerry Buburuz <jerry@ee.ualberta.ca>]

Hi again,

I didn't get any reply's to my last email.

But here I go again.

I got openbsd 2.9 working. IPnat is working up to a point.
The boxes behind the bsd box  can ssh out. NIS and nfs are getting
through. http traffic is not getting through or coming back.

my ipnat.rules
######################################
map tx0 192.168.0.0/24 -> 129.x.x.x/32 portmap tcp/udp 10000:60000
map tx1 192.168.0.0/24 -> 129.x.x.x/32 portmap tcp/udp 10000:60000
map tx0 192.168.0.0/24 -> 129.x.x.x/32
map tx1 192.168.0.0/24 -> 129.x.x.x/32
######################################

my ipf.rules
#####################################
pass in from any to any
pass out from any to any
#####################################

Now I've bin through alot of web pages, archives on openbsd, cannot seem
to figure out what is wrong.

I'm sure ipnat should allow http traffic through? Or is it that the
returning reply say from www.google.com is replying with a random port
number and this is what ipnat does not like.

I'm thinking do I need a proxy server like squid to get http traffic back?

please help

thanks

jerry