Necessary to implement static NAT 1:1

Ian Smith smithi at
Sat Feb 1 09:05:19 UTC 2014

In freebsd-questions Digest, Vol 504, Issue 5, Message: 31
On Wed, 29 Jan 2014 14:13:01 -0800 Michael Sierchio <kudzu at> wrote:
 > On Wed, Jan 29, 2014 at 2:10 PM, Joshua Smith <juicewvu at> wrote:
 > > Just curious why one would use natd instead of the in kernel nat 
 > > available as either part of ipfw or pf.
 > Kernel nat for ipfirewall requires a custom kernel (GENERIC does not
 > have LIBALIAS).

Not so, Michael.  From /etc/rc.d/ipfw

	if checkyesno dummynet_enable; then
		required_modules="$required_modules dummynet"
	if checkyesno natd_enable; then
		required_modules="$required_modules ipdivert"
	if checkyesno firewall_nat_enable; then
		required_modules="$required_modules ipfw_nat"

ipfw_nat.ko is compiled with libalias, and works fine with GENERIC.

cheers, Ian

More information about the freebsd-questions mailing list