[rescue] Interesting Networking question

George Adkins george at webbastard.org
Thu Mar 14 18:00:38 CST 2002


I have  a bit of a problem that's thumbing it's nose at me.
I have an older Alpha (running NetBSD) that I'm trying to use as a router 
between my firewall, ethernet and FDDI segments.

the firewall (and DMZ) is on the tlp0,live-address/24
the Ethernet is off of the fxp0, 192.168.0.x/24
the FDDI ring is off the fpa0, 192.168.1.x/24

I am running ipnat to let the RFC1918 addressed on the Ethernet and FDDI talk 
to the outside world.  Now, here's the rub, both of the private segments can 
talk to the outside world, but they cannot talk to each other.  I would think 
that the routing table would 'just handle it', but apparently it's not.
Pinging from the ether side and get replies from 192.168.0.1 and 192.168.1.1
Pinging from the FDDI side, I get replies only from 192.168.1.1
Neither side gets replies from anything further out than the router's 
interface.

Anyone have any suggestions?

George

(relevant info follows....)
on the router, 

ifconfig -a looks like: (media status edited out)
tlp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        address: 00:00:f8:21:6c:28
        inet 66.92.169.148 netmask 0xffffff00 broadcast 66.92.169.255
fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        address: 00:d0:b7:ba:2d:7d
        inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255
fpa0: flags=8863<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST> mtu 4470
        address: 00:a0:24:61:ee:5e
        inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
lo0: flags=8009<UP,LOOPBACK,MULTICAST> mtu 33192
        inet 127.0.0.1 netmask 0xff000000

netstat -rn:
Routing tables
Internet:
Destination      Gateway              Flags Refs Use  Mtu  Interface
default                66.92.169.1           UGS     2   3268  1500  tlp0
66.92.169/24    link#1                       UC       2    0      1500  tlp0
66.92.169.1      00:02:3b:00:b1:5f  UHLc   1     0     1500  tlp0
66.92.169.143  08:00:20:de:ad:02  UHLc 0    17   1500  tlp0
127                     127.0.0.1                 UGRS  0    0  33192  lo0
127.0.0.1           127.0.0.1                  UH      1     0  33192  lo0
192.168              link#2                       UC      3     0   1500 fxp0
192.168.0.14     00:08:c7:5d:d2:93  UHLc 2   118 1500  fxp0
192.168.0.17     08:00:20:9d:d2:7d  UHLc 0     5   1500  fxp0
192.168.0.46     00:40:05:35:3d:bb  UHLc 0    5528 1500  fxp0
192.168.1           link#3                        UC     1    0   4352  fpa0
192.168.1.18     08:00:20:8d:a8:c4  UHLc 1    50   4352  fpa0

/etc/ipnat.conf
rdr tlp0 66.92.169.148/32 port 3389 -> 192.168.0.99 port 3389
map tlp0 192.168.0.0/16 -> 66.92.169.148/32 proxy port ftp ftp/tcp
map tlp0 192.168.0.0/16 -> 66.92.169.148/32 portmap tcp/udp 10001:20000
map tlp0 192.168.0.0/16 -> 66.92.169.148/32



More information about the rescue mailing list