Necessary to implement static NAT 1:1

Frank Leonhardt frank2 at
Wed Jan 29 22:17:54 UTC 2014

On 29/01/2014 22:13, Michael Sierchio wrote:
> On Wed, Jan 29, 2014 at 2:10 PM, Joshua Smith <juicewvu at> wrote:
>> Just curious why one would use natd instead of the in kernel nat available as either part of ipfw or pf.
> Kernel nat for ipfirewall requires a custom kernel (GENERIC does not
> have LIBALIAS).
Although it's moot as I believe the kernel ends up with the same code 
(could be wrong), so it makes no difference to any limits. The kernel 
NAT is probably better as it handles hairpins whereas natd does not (or 
I've never been able to make it!)

More information about the freebsd-questions mailing list