From owner-freebsd-net@FreeBSD.ORG Sun Sep 23 05:52:24 2007 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 83B5616A417 for ; Sun, 23 Sep 2007 05:52:24 +0000 (UTC) (envelope-from randy@psg.com) Received: from rip.psg.com (rip.psg.com [147.28.0.39]) by mx1.freebsd.org (Postfix) with ESMTP id 7725D13C49D for ; Sun, 23 Sep 2007 05:52:24 +0000 (UTC) (envelope-from randy@psg.com) Received: from cust16202.lava.net ([64.65.95.74] helo=[192.168.0.101]) by rip.psg.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.67 (FreeBSD)) (envelope-from ) id 1IZKOF-000OGo-94 for freebsd-net@freebsd.org; Sun, 23 Sep 2007 05:52:23 +0000 Message-ID: <46F5FF0A.7030203@psg.com> Date: Sat, 22 Sep 2007 19:52:10 -1000 From: Randy Bush User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: FreeBSD Net X-Enigmail-Version: 0.95.3 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit Subject: nat and ipfw - divert or builtin X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 23 Sep 2007 05:52:24 -0000 freebsd-current i386 / soekris i used to use ipfw to divert to natd. so, when i went to configure a new nat box nat box today, i was 82.3% there when i hit a bunch of nat stuff in ipfw that i do not remember seeing before. it appears that ipfw will nat all on its own without natd and divert. what's the trade-off? which should i use? randy