From owner-freebsd-questions  Thu Dec 27  5: 7:29 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108])
	by hub.freebsd.org (Postfix) with ESMTP id 06A9C37B405
	for <questions@FreeBSD.ORG>; Thu, 27 Dec 2001 05:07:17 -0800 (PST)
Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108])
	by cactus.fi.uba.ar (8.11.6/8.11.6) with ESMTP id fBRD4aK74644;
	Thu, 27 Dec 2001 10:04:44 -0300 (ART)
	(envelope-from fgleiser@cactus.fi.uba.ar)
Date: Thu, 27 Dec 2001 10:04:36 -0300 (ART)
From: Fernando Gleiser <fgleiser@cactus.fi.uba.ar>
To: Joe & Fhe Barbish <barbish@a1poweruser.com>
Cc: FBSD Questions <questions@FreeBSD.ORG>
Subject: Re: ipf/IPFilter/ipnat  vers    ipfw/IPFW/nat
In-Reply-To: <LPBBIGIAAKKEOEJOLEGOAEHFCKAA.barbish@a1poweruser.com>
Message-ID: <20011227095321.H73822-100000@cactus.fi.uba.ar>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Wed, 26 Dec 2001, Joe & Fhe Barbish wrote:

> I scanned the questions archives and sniped this info.
> I would like to know if the views stated are correct.
> Any other insight or background info would be great.
>
> Does the ipf port install as userland or kernel & how to force kernel?

The firewall/nat code itself is kernel code. The utilities are user space

> Is there a package install for ipf or ipnat?

No. They are part of the base system.

> Where would I find the ipf and ipnat ports?

They already are in the system.

> Where can I find info on ipnat?

the ipnat man pages:
man 1 ipnat	# the ipnat(1) utility
man 5 ipnat	# the ipnat.conf file format
man 4 ipnat	# the ipnat API

The ipf howto:

http://www.obfuscation.org/ipf/

The ipf mailing list archives:

http://false.net/ipfilter

And the ipf FAQ

http://home.earthlink.net/~jaymzh666/IPF-FAQ/IPFtoc.html

> What is the difference between nat and ipnat if both run in user land?
> Does IPFilter have a built in nat function?

natd runs in userspace. ipnat runs in kernel space.

Hope this helps


			Fer
>
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message