IP filter (NAT)

I have just downloaded ip_fil3.4.6 for QNX4.25 / TCPIP 5.0.

I am only interested in NAT at this time (i.e. I don’t care about filtering,
yet).

I think I understand how to write the rules. I already have a gateway
system with a single interface to the outside world (10.0.0.35/16). I have
two other subnets defined (10.1 & 10.2) which are correctly configured to
use 10.0.0.35 as a gateway. I have created a rules file “/etc/ipnat” which
looks like:

map en1 10.1.0.0/16 → 10.0.0.35/32 portmap tcp/udp 40000:60000
map en1 10.1.0.0/16 → 10.0.0.35/32
map en1 10.2.0.0/16 → 10.0.0.35/32 portmap tcp/udp 40000:60000
map en1 10.1.0.0/16 → 10.0.0.35/32

The documentation is a little “sparce” on how to get started. After TCP/IP
is up and running, what is the next thing that must be started?

BTW, ipftest -l /etc/ipnat says that there is no rules file present. What’s
that about?

“Bill Caroselli (Q-TPS)” <QTPS@earthlink.net> wrote:

I have just downloaded ip_fil3.4.6 for QNX4.25 / TCPIP 5.0.

I am only interested in NAT at this time (i.e. I don’t care about filtering,
yet).

I think I understand how to write the rules. I already have a gateway
system with a single interface to the outside world (10.0.0.35/16). I have
two other subnets defined (10.1 & 10.2) which are correctly configured to
use 10.0.0.35 as a gateway. I have created a rules file “/etc/ipnat” which
looks like:

map en1 10.1.0.0/16 → 10.0.0.35/32 portmap tcp/udp 40000:60000
map en1 10.1.0.0/16 → 10.0.0.35/32
map en1 10.2.0.0/16 → 10.0.0.35/32 portmap tcp/udp 40000:60000
map en1 10.1.0.0/16 → 10.0.0.35/32

The documentation is a little “sparce” on how to get started. After TCP/IP
is up and running, what is the next thing that must be started?

BTW, ipftest -l /etc/ipnat says that there is no rules file present. What’s
that about?

I think it’s “ipfd -f /etc/ipnat” (it’s been a long time you know :slight_smile:

-xtang