From owner-freebsd-questions  Tue Dec 31 10:53:56 1996
Return-Path: <owner-questions>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.4/8.8.4) id KAA13712
          for questions-outgoing; Tue, 31 Dec 1996 10:53:56 -0800 (PST)
Received: from news.toplink.net (news.toplink.net [194.163.120.7])
          by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id KAA13703
          for <freebsd-questions@freebsd.org>; Tue, 31 Dec 1996 10:53:51 -0800 (PST)
Received: (from daemon@localhost) by news.toplink.net (8.7.5/8.7.3) id TAA20829; Tue, 31 Dec 1996 19:54:36 +0100 (MET)
To: freebsd-questions@freebsd.org
Path: mail2news
From: tinguely@plains.nodak.edu (Mark Tinguely)
Newsgroups: list.freebsd.questions
Subject: Re: IPfilter and NAT
Date: 31 Dec 1996 19:54:35 +0100
Organization: TopLink mail2news gateway
Lines: 15
Message-ID: <199612311839.MAA28768@plains.nodak.edu>
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

yes, I have run the IP filter and NAT on 2.1.5 (2.1.6 should not be any
different). I needed to run the version 3.1.2beta instead of ip filter 3.1.1.

yes, you need to enable the GATEWAY feature.

the ipnat error sounds like you did not load the loadable kernel module
before running the nat rules.

I use kernel ppp with the IP filter/NAT and use a simple script to
load the kernel loadble module, and figure out the new IP address
and then issue the ipnat instructions. I will put my scripts in
  ftp://www.cs.ndsu.NoDak.edu/nat-scripts/
for you to look at.

--mark.