From owner-freebsd-net  Sun Jan 27 17:49:20 2002
Delivered-To: freebsd-net@freebsd.org
Received: from swan.prod.itd.earthlink.net (swan.mail.pas.earthlink.net [207.217.120.123])
	by hub.freebsd.org (Postfix) with ESMTP id 8AB4937B400
	for <freebsd-net@freebsd.org>; Sun, 27 Jan 2002 17:49:17 -0800 (PST)
Received: from dialup-209.245.129.180.dial1.sanjose1.level3.net ([209.245.129.180] helo=blossom.cjclark.org)
	by swan.prod.itd.earthlink.net with esmtp (Exim 3.33 #1)
	id 16V0v5-0006eK-00; Sun, 27 Jan 2002 17:49:16 -0800
Received: (from cjc@localhost)
	by blossom.cjclark.org (8.11.6/8.11.3) id g0S1mw427513;
	Sun, 27 Jan 2002 17:48:58 -0800 (PST)
	(envelope-from cjc)
Date: Sun, 27 Jan 2002 17:48:49 -0800
From: "Crist J. Clark" <cjc@FreeBSD.ORG>
To: Clemens Hermann <haribeau@gmx.de>
Cc: Andre Oppermann <oppermann@pipeline.ch>,
	Matthew Emmerton <matt@gsicomp.on.ca>,
	BSD NET-List <freebsd-net@FreeBSD.ORG>
Subject: Re: natd restart
Message-ID: <20020127174849.B27080@blossom.cjclark.org>
References: <Pine.BSF.4.21.0201270011300.6340-100000@cody.jharris.com> <003c01c1a701$da5209e0$1200a8c0@gsicomp.on.ca> <20020127101854.B267@idefix.local> <00b501c1a742$9a89d950$1200a8c0@gsicomp.on.ca> <3C543C2F.970F0375@pipeline.ch> <20020127215355.B267@idefix.local>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20020127215355.B267@idefix.local>; from haribeau@gmx.de on Sun, Jan 27, 2002 at 09:53:56PM +0100
X-URL: http://people.freebsd.org/~cjc/
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-net.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-net>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-net>
X-Loop: FreeBSD.org

On Sun, Jan 27, 2002 at 09:53:56PM +0100, Clemens Hermann wrote:
> Am 27.01.2002 um 18:43:11 schrieb Andre Oppermann:
> 
> Hi Andre,
> 
> > Have a look at IPFILTER where IPNAT is part of. It does everything in
> > the kernel.
> 
> to come back to my initial question: is there a way to modify ipnat
> rules without breaking existing connections?

With ipnat(1)? Yes.
-- 
Crist J. Clark                     |     cjclark@alum.mit.edu
                                   |     cjclark@jhu.edu
http://people.freebsd.org/~cjc/    |     cjc@freebsd.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message