From owner-freebsd-questions Wed Mar 13 8:51:10 2002 Delivered-To: freebsd-questions@freebsd.org Received: from tomts22-srv.bellnexxia.net (tomts22.bellnexxia.net [209.226.175.184]) by hub.freebsd.org (Postfix) with ESMTP id 7318237B439 for ; Wed, 13 Mar 2002 08:50:43 -0800 (PST) Received: from scaryg.shacknet.nu ([64.231.142.145]) by tomts22-srv.bellnexxia.net (InterMail vM.4.01.03.23 201-229-121-123-20010418) with ESMTP id <20020313165042.FZPX20790.tomts22-srv.bellnexxia.net@scaryg.shacknet.nu>; Wed, 13 Mar 2002 11:50:42 -0500 Received: from localhost ([::1] helo=scaryg.shacknet.nu) by scaryg.shacknet.nu with smtp (Exim 3.34 #1) id 16lByX-000Jur-00; Wed, 13 Mar 2002 11:51:41 -0500 Date: Wed, 13 Mar 2002 11:51:37 -0500 From: ScaryG To: alan@quay.net (Alan McKay) Cc: freebsd-questions@freebsd.org Subject: Re: ipfw/pppoe/nat trouble Message-Id: <20020313115137.25ebab1f.freymann@scaryg.shacknet.nu> In-Reply-To: <20020313163949.11A2B5D4A@victory.quay.net> References: <20020313163949.11A2B5D4A@victory.quay.net> X-Mailer: Sylpheed version 0.7.2 (GTK+ 1.2.10; i386-portbld-freebsd4.4) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-MailScanner: Found to be clean Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, 13 Mar 2002 11:39:48 -0500 (EST) alan@quay.net (Alan McKay) wrote: > So should I give up on PPP's native NAT and switch to NATD? > Anyone know what could be up here? Yes. I do the same thing with my config using natd. I have the following in my /etc/rc.conf file: natd_program="/sbin/natd" natd_enable="YES" natd_interface="tun0" natd_flags="-f /etc/natd.conf" In my /etc/ppp/ppp.conf file: nat enable yes is in there. I think when I removed it, everything broke. Then in my /etc/natd.conf file: redirect_port tcp 192.168.0.10:81 81 (I'm actually using port 81 instead of 80). Get rid of this stuff out of your ppp.conf file. and in my firewall rules: ${fwcmd} add pass log tcp from any to any 81 in via{$oif} setup Works great for me! That, and a few other ports. -Gerry Web Hosting // Primary & Secondary DNS Services at http://www.interpool.ca To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message