Apparently flakey behavior with DNAT, SNAT, and masquerading

[Greg Scott]

I'm an IDIOT!!!  Where was my head when I put THAT in?????  

I'll fix and test this first thing Monday AM and post 
an update.  I'll bet that's the problem!  It should
definitely work better when the broadcast mask is right!

thanks Ramin

- Greg



-----Original Message-----
From: Ramin Alidousti [mailto:ramin@UU.NET]
Sent: Saturday, June 09, 2001 1:57 PM
To: Greg Scott
Cc: 'Ramin Alidousti'; netfilter@lists.samba.org;
'dan.conway@sigentgroup.com'; 'bob@northlandusa.com'
Subject: Re: Apparently flakey behavior with DNAT, SNAT, and
masquerading


On Fri, Jun 08, 2001 at 11:35:16PM -0500, Greg Scott wrote:

> NORTHLAND_IP_RANGE="192.168.0.0/24"
> NORTHLAND_IP="192.168.0.254/32"
> NORTHLAND_BCAST_ADDRESS="192.168.0.255"
> NORTHLAND_IFACE="eth1"
> 
> XIGENT_IP_RANGE="192.168.10.0/24"
> XIGENT_IP="192.168.10.254/32"
> XIGENT_BCAST_ADDRESS="192.168.10.255"
> XIGENT_IFACE="eth2"
> 
> DMZ_IP_RANGE="10.10.10.0/24"
> DMZ_IP="10.10.10.88/32"
> DMZ_BCAST_ADDRESS="10.10.10.255"
> DMZ_IFACE="eth3"
> 
> INET_IP_RANGE="nn.nn.nn.128/28" # Usable IPs from .129 thru .143

usable is .129 through .142

> INET_IP="nn.nn.nn.130"
> INET_NETMASK="255.255.255.240"
> INET_BCAST_ADDRESS="nn.nn.nn.31"

Shouldn't this be:
	INET_BCAST_ADDRESS="nn.nn.nn.143"


I've not checked the rest of the config. Fix this and try again...

Ramin