From owner-freebsd-questions@freebsd.org  Wed Oct 25 08:07:43 2017
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 046BCE423C8
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Wed, 25 Oct 2017 08:07:43 +0000 (UTC)
 (envelope-from trond@fagskolen.gjovik.no)
Received: from smtp.fagskolen.gjovik.no (smtp.fagskolen.gjovik.no
 [IPv6:2001:700:1100:1:200:ff:fe00:b])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "smtp.fagskolen.gjovik.no",
 Issuer "Fagskolen i Gj??vik" (not verified))
 by mx1.freebsd.org (Postfix) with ESMTPS id 8C73123E7
 for <freebsd-questions@freebsd.org>; Wed, 25 Oct 2017 08:07:42 +0000 (UTC)
 (envelope-from trond@fagskolen.gjovik.no)
Received: from mail.fig.ol.no (localhost [127.0.0.1])
 by mail.fig.ol.no (8.15.2/8.15.2) with ESMTPS id v9P87Whr060337
 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO)
 for <freebsd-questions@freebsd.org>; Wed, 25 Oct 2017 10:07:32 +0200 (CEST)
 (envelope-from trond@fagskolen.gjovik.no)
Received: from localhost (trond@localhost)
 by mail.fig.ol.no (8.15.2/8.15.2/Submit) with ESMTP id v9P87WCn060334
 for <freebsd-questions@freebsd.org>; Wed, 25 Oct 2017 10:07:32 +0200 (CEST)
 (envelope-from trond@fagskolen.gjovik.no)
X-Authentication-Warning: mail.fig.ol.no: trond owned process doing -bs
Date: Wed, 25 Oct 2017 10:07:32 +0200 (CEST)
From: =?ISO-8859-1?Q?Trond_Endrest=F8l?= <Trond.Endrestol@fagskolen.gjovik.no>
Sender: Trond.Endrestol@fagskolen.gjovik.no
To: FreeBSD questions <freebsd-questions@freebsd.org>
Subject: Re: Routing problem
In-Reply-To: <CAC-QnVUodCckdVE1Whaz7xm3DEzGNSF1hAgtEaVi4sP0GB58ZA@mail.gmail.com>
Message-ID: <alpine.BSF.2.21.1710251002540.44721@mail.fig.ol.no>
References: <mailman.87.1508846402.5945.freebsd-questions@freebsd.org>
 <20171024230440.N32145@sola.nimnet.asn.au>
 <CAC-QnVUodCckdVE1Whaz7xm3DEzGNSF1hAgtEaVi4sP0GB58ZA@mail.gmail.com>
User-Agent: Alpine 2.21 (BSF 202 2017-01-01)
Organization: Fagskolen Innlandet
OpenPGP: url=http://fig.ol.no/~trond/trond.key
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00
 autolearn=ham autolearn_force=no version=3.4.1
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on mail.fig.ol.no
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Oct 2017 08:07:43 -0000

On Tue, 24 Oct 2017 11:54-0400, Efren Bravo wrote:

> @Ian Smith: gateway_enable="YES" I wrote ok, was my mistake when I copy it
> into the email and sysctl net.inet.ip.forwarding=1. thanks
> 
> @Trond Endrestol
> 
> I didn't know about all those NATs (NAT44, NAT444, NAT64, etc), when I
> installed a fw box 10 years ago they didn't exist, I think, because I
> followed the same config and it worked. Now, the question is, how to make
> it work?

NAT(44) has been around for more than 20 years, and is partially 
responsible for delaying the deployment of IPv6.

Read Section 29.5 on ipf (ipfilter) in the Handbook: 
https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipf.html

Subsection 29.5.4 says how to configure NAT(44).

-- 
Trond.