Necessary to implement static NAT 1:1
Ian Smith
smithi at nimnet.asn.au
Sat Feb 1 09:05:19 UTC 2014
In freebsd-questions Digest, Vol 504, Issue 5, Message: 31
On Wed, 29 Jan 2014 14:13:01 -0800 Michael Sierchio <kudzu at tenebras.com> wrote:
> On Wed, Jan 29, 2014 at 2:10 PM, Joshua Smith <juicewvu at gmail.com> wrote:
> > Just curious why one would use natd instead of the in kernel nat
> > available as either part of ipfw or pf.
>
> Kernel nat for ipfirewall requires a custom kernel (GENERIC does not
> have LIBALIAS).
Not so, Michael. From /etc/rc.d/ipfw
ipfw_prestart()
{
if checkyesno dummynet_enable; then
required_modules="$required_modules dummynet"
fi
if checkyesno natd_enable; then
required_modules="$required_modules ipdivert"
fi
if checkyesno firewall_nat_enable; then
required_modules="$required_modules ipfw_nat"
fi
}
ipfw_nat.ko is compiled with libalias, and works fine with GENERIC.
cheers, Ian
More information about the freebsd-questions
mailing list