From owner-freebsd-questions@FreeBSD.ORG  Tue Dec 14 01:05:38 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0D4EE16A4CF
	for <freebsd-questions@freebsd.org>;
	Tue, 14 Dec 2004 01:05:38 +0000 (GMT)
Received: from jeremino.homeunix.net (jeremino.xs4all.nl [80.126.224.163])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B449E43D1F
	for <freebsd-questions@freebsd.org>;
	Tue, 14 Dec 2004 01:05:37 +0000 (GMT)
	(envelope-from kees@jeremino.homeunix.net)
Received: from jeremina.homeunix.net ([10.0.0.5])
	by jeremino.homeunix.net with smtp (Exim 4.42)
	id 1Ce189-0001E3-Qj; Tue, 14 Dec 2004 02:05:33 +0100
From: Kees Plonsz <kees@jeremino.homeunix.net>
To: dave <dmehler26@woh.rr.com>, freebsd-questions@freebsd.org
Date: Tue, 14 Dec 2004 02:05:34 +0100
References: <list.freebsd.questions#20041213203548.GC69026@keyslapper.org>
	<list.freebsd.questions#000801c4e172$a9e49df0$0400a8c0@satellite>
Lines: 17
Organization: Chaotic
User-Agent: KNode/0.8.0
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7Bit
Message-Id: <20041214010537.B449E43D1F@mx1.FreeBSD.org>
Subject: Re: just a couple quick pf/nat questions
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Dec 2004 01:05:38 -0000

dave wrote:

> Hi,
>     I use to use ipf under pre-5.3. NOw i have switched to pf for various
> reasons. I have not as of yet deployed it on my router, but i will be
> doing so. In looking it over, i do not believe pf needs nat_enable it does
> all it's nats within the pf.conf file.
> HTH
> Dave.
> 
Why are there three ways of filtering and natting ip-packets ?
ipfw - This is how my router is working at the moment
ipf  - I am just reading and testing this, looks nice
pf   - looks the same as ipf 

They all have stateful filtering and nat. What should I chose ?