From owner-freebsd-questions Thu Nov 16 23:33:25 2000 Delivered-To: freebsd-questions@freebsd.org Received: from bessel.tekniikka.turkuamk.fi (bessel.tekniikka.turkuamk.fi [193.166.133.10]) by hub.freebsd.org (Postfix) with ESMTP id B4A2D37B479 for ; Thu, 16 Nov 2000 23:33:21 -0800 (PST) Received: from localhost (eyurtese@localhost) by bessel.tekniikka.turkuamk.fi (8.9.2/8.9.2) with ESMTP id JAA59556 for ; Fri, 17 Nov 2000 09:33:19 +0200 Date: Fri, 17 Nov 2000 09:33:19 +0200 (WET) From: Evren Yurtesen To: freebsd-questions@freebsd.org Subject: ipfw or natd uses more resources? Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi, I have ipfw and natd configured. I wonder what is the reason that I should put natd in the first line of my ipfw conf. Because now I see my natd is using 12% of the cpu almost all the time and plus of course it lets packets to be examined by ipfw. Isnt it better if I put natd somewhere at the end of ipfw rules so only the packets which survive the ipfw rules will meet with natd ? What is the disadvantage? Evren To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message