RE: IPNat and ICMP packages...

["Haag, Ullrich - MBDC" <Ullrich_(_dot_)_Haag_(_at_)_MBDC_(_dot_)_com>]

Since it normally works without a hitch, one would need a little more info
about your setup (ipnat.conf, ipf.conf, ...).

You have to let the ICMP packages get back in if you do firewalling.

Hope that helps,
Jason

-----Original Message-----
From: Christian Edward Gruber [mailto:christian_(_dot_)_edward_(_dot_)_gruber_(_at_)_gmx_(_dot_)_net]
Sent: Wednesday, October 18, 2000 9:48 AM
To: tech_(_at_)_openbsd_(_dot_)_org
Subject: IPNat and ICMP packages...


Is there any way to configure NAT such that I can ping from a machine behind
the nat and have it succeed?  This is possible with some userland natd type
stuff on other O/Ss so if it is not, I was wondering why so? (I'm new to
really low-level networking, and am interested in knowing the issues here.)

thanks,
Christian.