Routing Question

[Chewie71]

I've got an OpenBSD system serving as a Firewall/Internet Gateway/VPN for my WindowsNT network. It works great and has worked great for almost a year now.

Now though I'm adding another subnet off of a second NIC in my NT server. I can ping from that subnet all the way through the NT server and too the private side of the OpenBSD box but not beyond that. My IPNAT rules are set to allow the new subnet access to the Internet but it still doesn't work. Any ideas???

New network - 192.168.3.0

Into NT Server - 192.168.3.1 - NIC2
192.168.0.1 - NIC1

OpenBSD Server - 192.168.0.10 - Internal-private
xxx.xxx.167.17 - Internet-public

I can ping from any address on the 3.0 network to 192.168.0.10 but not beyond that. I can ping from the OpenBSD box to any IP on the 3.0 network. I think it's got to be in my IPF or IPNAT setup but I'm at a loss right now.

 

[JStrader]

Give this a try.
rl0 is the external adapter.

ext0 = "rl0"

nat on $ext0 from 192.168.0.0/24 to any -> $ext0
nat on $ext0 from 192.168.3.0/24 to any -> $ext0