[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Road Runner and IP Masquerading



Hi Folks

I just got Road Runner installed a couple of weeks ago and it worked fine with a single computer hook up to it.

I then bought a copy of OpenBSD version 2.7 and broke out my 486/100 mhz, with 128megs of ram and a 6 GB hard drive computer and installed (2) nic, 3c905 (ep0) and it is connected to my cable modem, the second is a 3c509 (xl0) and it is connected to my hub with has 4 workstation connected to it.  The OpenBSD server is very simple.

I then loaded the OpenBSD to the system and installed all the patches for common, and I386 for version 2.7.  Then I build the kernel for this server installed it new bsd kernel and moved the old to a floppy diskette the server can up fine without any errors.
   
When the system got done building the kernel and the new kernel was on running on the server. I read through the OpenBSD FAQ chapter 6 and set up the server to correct setting (I thought I Did)!!!

Problem:

I can be at the console and ping, telnet, and FTP to any site I need to.  I can also ping, telnet, and FTP to my redhat server on the inside.  O.K.  (Things are looking good) !!!

When I got to my laptop or my redhat server I can ping, telnet, and FTP to the OpenBSD server without problems. (great life is looking better) !!!

But I can ping the nic connected to the cable modem without and problem from the laptop. (BUT I CAN GET ANY INFORMATION TO GO OUT AND COME BACK IN) !!!!

(HELP ... HELP ... HELP ...) the wife is getting mad because she can not surf the web.

Please could someone help me find answer to my problem...

Information to help with the problem:

(1) /etc/ifconfig -am 

<snap>
lo0: flags=8009<UP,LOOPBACK,MULTICAST> mtu 32972
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
	inet6 ::1 prefixlen 128
	inet 127.0.0.1 netmask 0xff000000 
lo1: flags=8008<LOOPBACK,MULTICAST> mtu 32972
xl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	media: Ethernet autoselect (10baseT)
	status: active
	inet 192.168.252.10 netmask 0xffffff00 broadcast 192.168.252.255
	inet6 fe80::210:4bff:fe63:9231%xl0 prefixlen 64 scopeid 0x1
ep0: flags=8863<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	media: Ethernet 10baseT
	inet6 fe80::260:8cff:fef1:71e1%ep0 prefixlen 64 scopeid 0x2
	inet 24.88.246.182 netmask 0xfffffe00 broadcast 255.255.255.255
<snap>

(2) /etc/ipf.rules

# edit the ipfilter= line in /etc/rc.conf to enable IP filtering
# 
# I edit the rc.conf file and change the above to yes
#
# Being of the ipf.rules
#
pass in from any to any
pass out from any to any
#
# End of ipf.rules

(3) /etc/ipnat.rules

# edit the ipnat= line in /etc/rc.conf to enable Network Address Translation
#
# I edit the rc.conf file and change the above to yes
#
# Being of the ipnat.rules
#
map xl0 192.168.252.0/24 -> 24.88.246.0/32 portmap tcp/udp 10000:60000
map xl0 192.168.252.0/24 -> 24.88.246.0/32
#
# map xl0 192.168.252.0/24 -> 24.88.246.0/32 proxy port ftp ftp/tcp
#
# End of the ipnat.rules
#

(4) route -n show

Routing tables

Internet:
Destination      Gateway            Flags 
default          24.88.246.1        UG     
24.88.246.0      link#2             U      
24.88.246.1      0:30:80:76:b8:8c   UH     
24.88.246.182    127.0.0.1          UGH    
127.0.0.0        127.0.0.1          UG     
127.0.0.1        127.0.0.1          UH     
192.168.252.0    link#1             U      
198.168.252.10   127.0.0.1          UGH    
224.0.0.0        127.0.0.1          U      

Internet6:
Destination      Gateway            Flags 
default          ::1                UG     
default          ::1                UG     
::1              ::1                UH     
::127.0.0.0      ::1                UG     
::224.0.0.0      ::1                UG     
::255.0.0.0      ::1                UG     
::ffff:0.0.0.0   ::1                UG     
2002::           ::1                UG     
2002:7f00::      ::1                UG     
2002:e000::      ::1                UG     
2002:ff00::      ::1                UG     
fe80::           ::1                UG     
fe80::%xl0       link#1             U      
fe80::%ep0       link#2             U      
fe80::%lo0       fe80::1%lo0        U      
fec0::           ::1                UG     
ff01::           ::1                U      
ff02::%xl0       link#1             U      
ff02::%ep0       link#2             U      
ff02::%lo0       fe80::1%lo0        U

The (4) things we hope to have the OpenBSD server to do are:

1 - surf the internet.
2 - ftp to and from the internet.
3 - telnet to and from the internet.
4 - Keep all OTHER'S out of the my in house network.

Thank's for your time & assistance.

Tim and Terry Martin
EMail: tamartin_(_at_)_i-love-cats_(_dot_)_com
Fax (919) 872-2524

==

============================================
Tim & Terry Martin
Email:  tamartin_(_at_)_I-Love-Cats_(_dot_)_com
FAX:    919.872.2524
============================================

_____________________________________________________________
=^..^= WIN A YEAR OF FREE CAT FOOD!!!
http://www.i-love-cats.com/contest.html




Visit your host, monkey.org