Problem with ipfw, in-kernel NAT and port redirection to jails

[Alexey Roslyakov]

08.02.2016 12:30, Kiryanov Vassily пишет:
> Hello Alexey,
>
> Thank you for this information, I have thoughts about using pf nat as
> an alternative way and your example will be useful for me.
>
> But Eugene Grosbein adviced me to turn off tso4 on network card
> underlaying my VLANs and it was enough to solve problem with port
> redirection. Without turning tso4 off ipfw + in-kernel NAT works
> fine but port redirection fails.
>

Thank you. It's my mistake - was confused by home gateway, where 
redirect_port worked perfectly (NIC without TSO support), and there is a 
notice in section BUGS of ipfw(8) about incompatible libalias and TSO.