From owner-freebsd-ipfw@FreeBSD.ORG  Tue Apr 18 10:36:39 2006
Return-Path: <owner-freebsd-ipfw@FreeBSD.ORG>
X-Original-To: freebsd-ipfw@freebsd.org
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A990816A401
	for <freebsd-ipfw@freebsd.org>; Tue, 18 Apr 2006 10:36:39 +0000 (UTC)
	(envelope-from neca@boox.co.yu)
Received: from server.boox.co.yu (server.boox.co.yu [194.247.202.226])
	by mx1.FreeBSD.org (Postfix) with SMTP id 297CF43D53
	for <freebsd-ipfw@freebsd.org>; Tue, 18 Apr 2006 10:36:37 +0000 (GMT)
	(envelope-from neca@boox.co.yu)
Received: (qmail 1892 invoked by uid 0); 18 Apr 2006 10:14:11 -0000
Received: from neca.boox.co.yu (HELO ?194.247.202.241?) (194.247.202.241)
	by server.boox.co.yu with SMTP; 18 Apr 2006 10:14:11 -0000
Message-ID: <4444C12F.9060100@boox.co.yu>
Date: Tue, 18 Apr 2006 12:36:31 +0200
From: Nenad Gavrilovic <neca@boox.co.yu>
User-Agent: Mozilla Thunderbird 1.0.7 (Windows/20050923)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: freebsd-ipfw@freebsd.org
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
Subject: In-Kernel NAT and stateful firewall
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Apr 2006 10:36:39 -0000

First, Thank You for Your work on NAT in-kernel.

I have test PC and some time to test it.

I have some problem to install. I add “#define IP_FW_TABLEARG 65535” in 
libalias/ipfw2-6/kld/ip_fw.h.
Also test_ipfw_nat.sh stop in some ipfw command.
I use FreeBSD 6.1-PRERELEASE.

I have a question. How to use ipfw nat with or without keep-state?

I successfully use ipfw nat without keep-state :(. But, I wont stateful 
firewall!!!
Can You send me some example for ipfw nat with keep-state and check-state.

Thanks,

Nenad Gavrilovic