Hi, I use to use ipf under pre-5.3. NOw i have switched to pf for various reasons. I have not as of yet deployed it on my router, but i will be doing so. In looking it over, i do not believe pf needs nat_enable it does all it's nats within the pf.conf file. HTH Dave.