Re: Gateway Problems

["Jim Michael" <jim.michael@toadmail.com>]

References: <000a01c2167e$1cf788b0$3aff8ed0@Zeppo>

I set nat up and can now ping the web from both NT and the SunBlade, if I
use an IP address.  I can't ping if I use a fully qualified domain name (but
I can from the gateway).  I can open the web browser on NT and get to web
pages using an IP address but not if I use a fully qualified domain name.  I
ran ppp -auto and tried to ping from NT using a fully qualified domain name
but the gateway did not dial in .  When I pinged with an IP address the
gateway did dial in.

My config files are very close to the FAQ.  The only other change from a
default install was to add each host name to /etc/hosts on the gateway,
such as "192.168.1.2 hotdog.mydomain.com hotdog".

ppp.conf
------------
default:
  set log Phase Chat LCP IPCP CCP tun command
  set device /dev/cua03
  set speed 115200
  set dial "ABORT BUSY ABORT NO\\sCARRIER TIMEOUT 5 \"\" AT OK-AT-OK ATE1Q0
OD \\dATDT\\T TIMEOUT 40 CONNECT"
  set openmode active 5
  set reconnect 3 20
  enable dns
  accept dns
  add default HISADDR

toadnet:
  set phone xxxxxxxxxx
  set login "ABORT NO\\sCARRIER TIMEOUT 5 ogin:--ogin XXX word: XXX"
  set timeout 120
  set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.0

ppp.linkup
-----------------------
MYADDR:
  ! sh -c "/sbin/pfctl -e -l tun0 -F all -R /etc/pf.conf -N /etc/nat.conf"

ppp.linkdown
----------------------
MYADDR:
!bg route delete HISADDR MYADDR
'bg pfctl -F all -d

nat.conf
---------
ext_if=tun0
nat on $ext_if from 192.168.0.0/16 to any -> $ext_if

pf.conf
-------
pass in all
pass out all

options
--------
/dev/cua03
lock
crtscts
115200
modem
defaultroute
noipdefault
idle 470

I know this is long.  Thanks for your help.


----- Original Message -----
From: "Marco Peereboom" <slash@peereboom.us>
To: "Jim Michael" <jim.michael@toadmail.com>; <misc@openbsd.org>
Sent: Tuesday, June 18, 2002 12:31 AM
Subject: Re: Gateway Problems


> Yes. Install nat unless you own several IP addresses.
> See: http://www.openbsd.org/faq/faq6.html#NAT &
> http://www.openbsd.org/faq/faq8.html#RevDNS
> to start with.
>
> There are plenty of examples on google & the mailing lists (including
mine).
>
> /marco
>
> ----- Original Message -----
> From: "Jim Michael" <jim.michael@toadmail.com>
> To: <misc@openbsd.org>
> Sent: Monday, June 17, 2002 23:10
> Subject: Gateway Problems
>
>
> > I set up an OpenBSD box as a gateway for my home network..  It is a
> standard
> > 3.1 install using ppp for a dialup connection. I can successfully login
to
> my
> > ISP and ping Internet addresses so I know the OpenBSD box can see the
> outside
> > world.  I uncommented net.inet.ip.forwarding=1 in /etc/sysctl.conf to
> allow IP
> > forwarding.
> >
> > I have a SunBlade running Solaris 8 and an NT box I'm trying to connect
> > through the gateway.  Both boxes can ping the OpenBSD gateway.  I set
the
> > OpenBSD box as the gateway in the NT Network/Protocols/TCPIP/Default
> Gateway.
> > I set the OpenBSD box as the default route on the SunBlade in the
> > /etc/defaultroute file and the Netscape advanced configurations.
> >
> > I have not setup pf or nat yet.  I'm using IP addresses only (no
internal
> > DNS).
> >
> > When I try to ping my ISP the SunBlade says that the connection was
> refused.
> > NT just says the request timed out.  I get no response when pinging
either
> my
> > ISP's IP address or domain name.
> >
> > Am I missing something obvious?  Any suggestions are appreciated.
> >
> > Jim Michael