Ip Filter - setup prob

Hi all.

I am having probs setting up an ipfilter. The filter software is from
qnx.com/~cdm. I want it to do nat between ppp0 and en0.

Setup:
RTP (first release - pre Patch A)
en0: 10.1.1.5/28
ppp0: as assigned by the isp

rc.local:
io-net -d ne2000 -p qnet -p tcpip forward -p pppmgr &
ifconfig lo0 up
ifconfig en0 10.1.1.5 etc…

pppd /dev/ser2 defaultroute connect “chat -f my_chat”

Then:
mount -Tio-net ./nfm-ipfilter file=/root/ipfilter/ip.conf

ip.conf contains:
map ppp0 10.1.1.0/28 → 0/32 portmap …( as per documentation)
map ppp0 10.1.1.0/28 ->0/32

So my problem and then my question is:
When I ping an external ip address (through ppp0) I see no packets going
out (looking at the modem lights) (except for the DNS requests, they do go
out through the modem, as they should) .

ping qnx.com Gets the name from the DNS then doesn’t send any icmp packets
at all.
Same for telnet … nothing.
ipmon shows packets going out to the correct addresses but it never
reports any input packets.

ipnat reports correct rules. I used ipf to start and stop logging, to pass
in/out all. All operates as expected.

Have I got the config or something else wrong or is there a prob with
ipfiler mapping packets from internal and 10.1.1.x to ppp0 ??

TIA
Andy

Andy <andy@symmetry.com.au> wrote:

Hi all.

I am having probs setting up an ipfilter. The filter software is from
qnx.com/~cdm. I want it to do nat between ppp0 and en0.

This one there is old. I will have him update to a new one.

Setup:
RTP (first release - pre Patch A)
en0: 10.1.1.5/28
ppp0: as assigned by the isp

rc.local:
io-net -d ne2000 -p qnet -p tcpip forward -p pppmgr &
ifconfig lo0 up
ifconfig en0 10.1.1.5 etc…

pppd /dev/ser2 defaultroute connect “chat -f my_chat”

Then:
mount -Tio-net ./nfm-ipfilter file=/root/ipfilter/ip.conf

Is this going to work? Any way, can you try this:

mount -Tio-net -o"file=/root/ipfilter/ip.conf,stack=tcpip" ./nfm-ipfilter

And see if it’s works for you?

-xtang

ip.conf contains:
map ppp0 10.1.1.0/28 → 0/32 portmap …( as per documentation)
map ppp0 10.1.1.0/28 ->0/32

So my problem and then my question is:
When I ping an external ip address (through ppp0) I see no packets going
out (looking at the modem lights) (except for the DNS requests, they do go
out through the modem, as they should) .

ping qnx.com Gets the name from the DNS then doesn’t send any icmp packets
at all.
Same for telnet … nothing.
ipmon shows packets going out to the correct addresses but it never
reports any input packets.

ipnat reports correct rules. I used ipf to start and stop logging, to pass
in/out all. All operates as expected.

Have I got the config or something else wrong or is there a prob with
ipfiler mapping packets from internal and 10.1.1.x to ppp0 ??

TIA
Andy