My setup seems to work perfectly with 2.0.32 but I would really like to be
able to use devel kernels instead (need ipmasq).
Here is my ipfwadm firewall rules:
IP firewall forward rules, default policy: accept
type prot source destination ports
acc/m all fred anywhere n/a
acc/m all ppro anywhere n/a
fred and ppro are 10.0.0.2 and 10.0.0.5
Here i'll show tcpdump output as it tries to connect to things:
22:30:15.711546 ppro.1301 > 10.0.0.1.domain: 62349+ (34)
22:30:15.711546 arp who-has ppro tell 10.0.0.1
22:30:15.711546 arp reply ppro is-at 0:60:8:42:15:77
22:30:15.711546 10.0.0.1.domain > ppro.1301: 62349 1/2/2 (132)
22:30:15.711546 ppro.1171 > judge.lis.net.au.telnet: S 4151029335:4151029335(0)
win 512 <mss 1460>
22:30:18.711117 ppro.1171 > judge.lis.net.au.telnet: S 4151029335:4151029335(0)
win 32120 <mss 1460>
22:30:24.710260 ppro.1171 > judge.lis.net.au.telnet: S 4151029335:4151029335(0)
win 32120 <mss 1460>
Documentation/* shows nothing about ip masquerading so i am bewildered.
Regards,
Patrick