[OpenBSD 3.9] NAT Configuration/ Static IP

Slycer · 05-07-2006, 09:09 AM

Okay, this is the sitution:

I've been trying to set up my OpenBSD box as a gateway for a few days now. But because im new to BSD I don't really know what to do.
So far, I've configured my rl0 and rl1 device so that I can access the internet from my OpenBSD box and access the OpenBSD box from my main box (Win XP). But I cant access the internet from my main box, meaning the comminication stops somewhere between the boxes.

This is what i've done so far:

I've added this in /etc/rc.conf:

Code:

#router  
ifconfig_rl0="inet x.x.x.x netmask 255.255.192.0" # x.x.x.x jis my IP IP netmask is from my ISP  
defaultrouter="84.255.192.1" # gateway IP of my ISP    

ifconfig_rl1="inet 192.168.0.1 netmask 255.255.255.0"  
gateway_enable="YES"    
sshd_enable="YES"

I've made a file called hostname.rl1 undet /etc/ and in it i've written:

Code:

inet 192.168.0.1 255.255.255.0 NONE

I've added both DNS server in /etc/resolv.conf

I've uncommented the line "net.inet.ip.forwarding" and changed the value to 1.

These are my configs:

pf.conf
rc.conf
ifconfig
route

Any ideas?

UPDATE:
Added in /etc/pf.conf:

mainbox="192.168.0.2"

rdr on $ext_if proto tcp from any to any port 80 -> $mainbox
rdr on $ext_if proto tcp from any to any port 21 -> $mainbox
rdr on $ext_if proto tcp from any to any port 25 -> $mainbox
rdr on $ext_if proto tcp from any to any port 110 -> $mainbox

Gsee · 05-08-2006, 09:01 PM

Have you:

a) rebooted since you changed the line in /etc/sysctl.conf
or
b) run sysctl net.inet.ip.forwarding=1

else, have you:

a) enabeld pf in /etc/rc.conf? (I can't seem to access your attached files)
b) have you rebooted since that?
or
b) run pfctl -e to manually enable pf

Let me know then we'll take it from there.

Regards,

Gsee

P.S. Also make sure you've looked at the FAQ section - http://www.openbsd.org/faq/faq6.html#PF

Slycer · 05-15-2006, 06:08 PM

Hey, thanks for the help, but I already solved the problem.

The trick was to manualy enable the pf. For some reason it wouldnt start even tough it was enabled in rc.conf. Weird.

Tnx anyway.

Gsee · 05-15-2006, 07:08 PM

Good to hear you've solved your problem. Double check the syntax in your rc.conf file - also be aware that changes in this file make no difference until the file is read at boot time.

Gsee

Slycer · 05-16-2006, 04:14 AM

This is the section in rc.conf:

http://extraball.sunsite.dk/notepad.php?ID=17459

Notice anything wrong?