General Questions

Two things I noticed from your picture:

(https://dl.dropboxusercontent.com/u/12387475/m0n0-1.png)


1) Your OPT1 interfaced is bridged with WAN. This is not correct, it should be bridged to None.

2) You have the interface IP address set to 10.0.0.1/24. Are you using an Alcatel modem with IP address 10.0.0.138? If so the default netmlask for that device is /8.

Thanks Fred, it's a Thomson Speedtouch ST516 Modem at 10.0.0.138

So this is what I have now with my m0n0wall at 192.168.0.100 and my clients at 192.168.0.*:

https://dl.dropboxusercontent.com/u/12387475/m0n0-3.png
https://dl.dropboxusercontent.com/u/12387475/m0n0-4.png

Still not working, pinging 10.0.0.138 ends in timeout.

Your Outbound NATs are not correct. They should be:

Interface: OUT
Source: 192.168.0.0/24
Destination: Any
Target: 10.0.0.1
Description: Modem NAT

Interface: WAN
Source: 192.168.0.0/24
Destination: Any
Target: (leave blank)
Description: Normal LAN NAT

I made this as you suggested: https://dl.dropboxusercontent.com/u/12387475/m0n0-5.png

Still the same, timeout while pinging :-/

And again if I enable advanced outbound NAT the modem becomes accessible, if I disable advanced outbound NAT it stays accessible until reboot.

Put a check mark in Enable Advanced Outbound NAT and reboot m0n0wall.

As I said the modem becomes accessable if I enable advanced outbound NAT - no boot required.
And it stays accessible even after disabling advanced outbound NAT.
After a reboot, it's inaccessible again.

No idea what to tell you. It works here as far as being able to get to the modem, but since I no longer have DSL I can't fully test.

After reading http://web.archive.org/web/20090620012308/http://wiki.m0n0.ch/wikka.php?wakka=AccessingModemOutsideFirewall again I realized that "advanced outbound NAT" has to be enabled - I always thought that it has to be disabled and the two rules should replace this.

So from that point of view it works :-)

Thanks a lot!

Stefan

So, you are saying that if configured as published, it works and continues to work after a reboot?

Yes, it does.

here is the page with images

https://docs.google.com/document/d/1EfP94OspFVjBVsGoTG9NZlbc7ZuEMJfvXiT4ANzJM4U

Don't click on the links in the table of contents as they redirect to the WayBack Machine archive that does not contain the images.

Will the m0n0wall wiki be coming back?

Hi Fred,

no idea, but I suspect it will, i'll ping MK

Thanks.

did you try to uncheck "Block private networks" at the bottom of http://m0n0wall/interfaces_wan.php ?