ipfw nat befuddlement

[Paolo Pisati]

On Mon, Oct 08, 2007 at 08:11:56PM +0900, Randy Bush wrote:
> > or substisute natd_enable/natd_interface in rc.conf with:
> > firewall_nat_enable="yes"
> > firewall_nat_interface="$IF"
> 
> aha!  that stuff is not in /etc/defaults/rc.conf

ops... forgot to commit it... :P
 
> extracted from /etc/rc.conf
> 
> ifconfig_vr0=DHCP
> ifconfig_ath0="192.168.0.1 channel 4 ssid foo mediaopt hostap up"
> gateway_enable=YES
> 
> # grep nat /etc/ipfw.rules
> nat 42 config if vr0 log
> add nat 42 ip4 from any to any via vr0
> 
> # sysctl net.inet.ip.fw.one_pass
> net.inet.ip.fw.one_pass: 0
> 
> system boots and vr0 gets a dhcp address successfully
> 
> dhcpd is running
> 
> wireless client successfully associates with ath0, but can not get dhcp
> address

is your ruleset/config ok? can you post it?
try to substitute the "nat 42 ip4 from any to any via vr0" rule with a 
divert rule, and config & start natd: does it config work as expected?

bye,
P.