does "nat redirect_port tcp" works for you on -CURRENT?

[Ian Smith]

On Thu, 5 Feb 2015 02:14:41 +0300, Lev Serebryakov wrote:
 > On 05.02.2015 01:16, Lev Serebryakov wrote:
 > 
 > > I have such rules in my firewall:
 > > 
 > > nat 9 config redirect_port tcp 192.168.134.2:16881 16881
 > > redirect_port udp 192.158.134.2:16881 16881 redirect_port tcp
 > > 192.168.134.2:22 22222
 > > 
 > > nat 1 config ip $EXT_IP same_ports
 >  One more datapoint: if I merge this to one NAT (and change rules
 > accordingly), redirect work as expected.
 > 
 >  But I have TWO different NATs in full config (for two ISPs) and don't
 > want to duplicate all redirection specifications, but want to use
 > third "common" NAT config. And such usage is shown in ipfw(8)!

Just curious .. what's your value of net.inet.ip.fw.one_pass?

And does all of this really need cross-posting to net@ as well as ipfw@?

cheers, Ian