Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 24 Sep 2008 12:10:41 -0500
From:      Kevin Kinsey <kdk@daleco.biz>
To:        fbsd1@a1poweruser.com
Cc:        freebsd-questions@freebsd.org, fire jotawski <jotawski@gmail.com>
Subject:   Re: nat and firewall
Message-ID:  <48DA7491.8030002@daleco.biz>
In-Reply-To: <NBECLJEKGLBKHHFFANMBOEBFCLAA.fbsd1@a1poweruser.com>
References:  <NBECLJEKGLBKHHFFANMBOEBFCLAA.fbsd1@a1poweruser.com>

next in thread | previous in thread | raw e-mail | index | archive | help
FBSD1 wrote:
> 
> natd_enable="YES"  This statement in rc.conf enables ipfw nated function.
> firewall_nat_enable="YES"  This is an invalid statement. No such thing as
> you have here.

This is no longer true; he did indeed find "firewall_nat_enable"
in /etc/defaults/rc.conf.  The knob seems to have first appeared
in February in HEAD and I'm guessing it cues the system to use a
new kernel-based nat rather than natd(8), but I've not read anything
further about this, as my system isn't as up to date as the OP's.
I don't know when this change was MFC'ed, but apparently fairly
recently?

I suppose we need someone a tad more "in the know" to straighten
that out for us.

Kevin Kinsey
-- 
A wise man can see more from a mountain top
than a fool can from the bottom of a well.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?48DA7491.8030002>