Necessary to implement static NAT 1:1

Ian Smith smithi at nimnet.asn.au
Sat Feb 1 09:05:19 UTC 2014


In freebsd-questions Digest, Vol 504, Issue 5, Message: 31
On Wed, 29 Jan 2014 14:13:01 -0800 Michael Sierchio <kudzu at tenebras.com> wrote:
 > On Wed, Jan 29, 2014 at 2:10 PM, Joshua Smith <juicewvu at gmail.com> wrote:
 > > Just curious why one would use natd instead of the in kernel nat 
 > > available as either part of ipfw or pf.
 > 
 > Kernel nat for ipfirewall requires a custom kernel (GENERIC does not
 > have LIBALIAS).

Not so, Michael.  From /etc/rc.d/ipfw

ipfw_prestart()
{
	if checkyesno dummynet_enable; then
		required_modules="$required_modules dummynet"
	fi
	if checkyesno natd_enable; then
		required_modules="$required_modules ipdivert"
	fi
	if checkyesno firewall_nat_enable; then
		required_modules="$required_modules ipfw_nat"
	fi
}

ipfw_nat.ko is compiled with libalias, and works fine with GENERIC.

cheers, Ian


More information about the freebsd-questions mailing list