firewall on FreeBSD

N.J. Thomas njt at
Sun Jun 26 19:25:26 GMT 2005

* Paul Schmehl <pauls at> [2005-06-24 12:58:51 -0500]:
> I've been using pf for a few years now, and I've never had problems
> understanding the syntax or how it works (but I also never do NAT, so
> that might be the reason it seems easy to me.)

Yes, pf is great, but doing NAT with pf is also just as easy to
understand. It depends on what you are doing, but for most people using
NAT is as easy turning on ip forwarding via sysctl and adding a single
line to your pf.conf configuration file ("nat on $ext_if...").


N.J. Thomas
njt at
Etiamsi occiderit me, in ipso sperabo

More information about the freebsd-questions mailing list