Necessary to implement static NAT 1:1

[Frank Leonhardt]

On 29/01/2014 22:13, Michael Sierchio wrote:
> On Wed, Jan 29, 2014 at 2:10 PM, Joshua Smith <juicewvu at gmail.com> wrote:
>> Just curious why one would use natd instead of the in kernel nat available as either part of ipfw or pf.
> Kernel nat for ipfirewall requires a custom kernel (GENERIC does not
> have LIBALIAS).
>
>
Although it's moot as I believe the kernel ends up with the same code 
(could be wrong), so it makes no difference to any limits. The kernel 
NAT is probably better as it handles hairpins whereas natd does not (or 
I've never been able to make it!)