From owner-freebsd-ipfw@FreeBSD.ORG  Sun Jul 25 02:27:52 2004
Return-Path: <owner-freebsd-ipfw@FreeBSD.ORG>
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E8A7216A4CE
	for <freebsd-ipfw@freebsd.org>; Sun, 25 Jul 2004 02:27:52 +0000 (GMT)
Received: from rwcrmhc11.comcast.net (rwcrmhc11.comcast.net [204.127.198.35])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B100243D62
	for <freebsd-ipfw@freebsd.org>; Sun, 25 Jul 2004 02:27:52 +0000 (GMT)
	(envelope-from mcc@fid4.com)
Received: from fid4.com (h006097296569.ne.client2.attbi.com[24.128.217.183])
          by comcast.net (rwcrmhc11) with SMTP
          id <200407250227490130025ebqe>
          (Authid: m.cambria);
          Sun, 25 Jul 2004 02:27:50 +0000
Message-ID: <41031A1D.8030608@fid4.com>
Date: Sat, 24 Jul 2004 22:25:33 -0400
From: "Michael C. Cambria" <mcc@fid4.com>
User-Agent: Mozilla/5.0 (X11; U; Linux i386; en-US;
	rv:1.4) Gecko/20030624 Netscape/7.1
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: freebsd-ipfw@freebsd.org
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: ipfw STUN Firewall/NAT Type
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 25 Jul 2004 02:27:53 -0000


Is there any documentation on what type of nat ifpw/nat is?  At present, 
I'm using FreeBSD 4.10-Stable and ipfw (not ipfw2)

For example, if rc.conf had just the bare minimum:

firewall_enable="YES"
firewall_type="OPEN"
natd_enable="YES"

what would a STUN client on a private subnet see ipfw/nat as, a Full 
Cone, Restricted Cone, Port Restricted Cone or Symmetric NAT?

I've tried with a few stun clients myself, but get conflicting results. 
  I'm interested in what ipfw/nat is meant to be?

Thanks,
MikeC