ipnat and "ping" problem.

[chip]

On 12/23/05, Maślanka Wojciech <wojciech.maslanka at gmail.com> wrote:
>
> This is my network:
> Internet---------------[rl0, 192.168.0.50_____10.0.0.1
> ,rl1]------------------[10.0.0.2]
> On 10.0.0.2 machine I cant ping any host in internet. I can ping only
> 10.0.0.1 and 192.168.0.50. :(
> Whats wrong??
>
>
>
> [/usr/src]#uname -a
> FreeBSD freebsd.mila10.6 6.0-RELEASE FreeBSD 6.0-RELEASE
>
>
> [/usr/src]#ipfstat -io
> pass out quick all
> pass in quick all
>
>
> [/usr/src]#ipnat -l
> List of active MAP/Redirect filters:
> map rl0 10.0.0.0/24 -> 192.168.0.50/32 proxy port ftp ftp/tcp
> map rl0 10.0.0.0/24 -> 192.168.0.50/32 portmap tcp/udp auto
> map rl0 10.0.0.0/24 -> 192.168.0.50/32
>
> List of active sessions:
> MAP 10.0.0.2      3610  <- -> 192.168.0.50    8666  [66.249.85.83 80]
> MAP 10.0.0.2       3609  <- -> 192.168.0.50    8665  [66.249.85.83 80]
> MAP 10.0.0.2      3608  <- -> 192.168.0.50    8664  [66.249.85.19 80]
> MAP 10.0.0.2       3607  <- -> 192.168.0.50    8663  [194.204.152.34 53]
> MAP 10.0.0.2      3606  <- -> 192.168.0.50    8662  [66.249.85.83 80]
>

I believe this is due to the fact that ICMP is the ICMP protocol and not UDP
or TCP.  There's really no port so it's first
come first serve in the NAT tables.  Clear your translations and then try
from a different host, betting it works.


--
Just my $.02, your mileage may vary,  batteries not included, etc....