From owner-freebsd-questions@FreeBSD.ORG  Mon Feb  8 16:24:40 2010
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id BC29210656A7
	for <freebsd-questions@freebsd.org>;
	Mon,  8 Feb 2010 16:24:40 +0000 (UTC)
	(envelope-from john@dexter.starfire.mn.org)
Received: from dexter.starfire.mn.org (starfire.skypoint.net [173.8.102.29])
	by mx1.freebsd.org (Postfix) with ESMTP id 77F668FC2A
	for <freebsd-questions@freebsd.org>;
	Mon,  8 Feb 2010 16:24:40 +0000 (UTC)
Received: (from john@localhost)
	by dexter.starfire.mn.org (8.11.3/8.11.3) id o18GOI124349;
	Mon, 8 Feb 2010 10:24:18 -0600 (CST) (envelope-from john)
Date: Mon, 8 Feb 2010 10:24:18 -0600
From: John <john@starfire.mn.org>
To: Warren Block <wblock@wonkity.com>
Message-ID: <20100208102418.A24197@starfire.mn.org>
References: <20100208075855.A20993@starfire.mn.org>
	<alpine.BSF.2.00.1002080827190.77390@wonkity.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
In-Reply-To: <alpine.BSF.2.00.1002080827190.77390@wonkity.com>;
	from wblock@wonkity.com on Mon, Feb 08, 2010 at 08:39:14AM -0700
Cc: freebsd-questions@freebsd.org
Subject: Re: Can loader.conf give you NATD support?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Feb 2010 16:24:40 -0000

On Mon, Feb 08, 2010 at 08:39:14AM -0700, Warren Block wrote:
> On Mon, 8 Feb 2010, John wrote:
> 
> > The natd man page says it is still necessary to create a customer
> > kernl with
> >
> > options IPFIREWALL
> > options IPDIVERT
> >
> > Is that still true, or can it be accomplished vi a loader.conf?
> 
> It's a kernel option, so you probably can't do it at runtime.
> 
> Consider using pf instead of ipfw.  pf does NAT without needing natd or 
> those kernel options.

Oh.  OK!  That must be new since the last time I did this.  Will it be
difficult to port my ipfw and natd rules to pf?

> -Warren Block * Rapid City, South Dakota USA
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"

-- 

John Lind
john@starfire.MN.ORG