ipfw nat befuddlement

[Andrey V. Elsukov]

> i386 current
> # grep -n nat /etc/ipfw.rules
> 33:add nat 42 all from any to any
> 34:add nat 42 config if vr0 same_ports unreg_only
> # ipfw -q /etc/ipfw.rules
> Line 33: getsockopt(IP_FW_ADD): Invalid argument
> kernel has
> options         IPFIREWALL
> options         IPFIREWALL_VERBOSE      #enable logging to syslogd(8)
> options         IPFIREWALL_VERBOSE_LIMIT=100    #limit verbosity
> options         IPDIVERT
> options         LIBALIAS

You need also:
options         IPFIREWALL_NAT          #ipfw kernel nat support

--
WBR, Andrey V. Elsukov