Re: ipfw nat problem

>> found a reason. forwarding was set to 0 in sysctl
>
> Never set net.inet.ip.forwarding=1 manually or via /etc/sysctl.conf.
>
> Always use gateway_enable="YES" in /etc/rc.conf, or else system scripts started with devd

I don't use devd on servers.

> on any interface creation (tunX, ngX, etc.) will switch forwarding to 0 again.

Well - i do create tun or other interfaces without problems. Can you point 
an example of this?