From owner-freebsd-questions@FreeBSD.ORG  Thu Aug 14 07:14:41 2014
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id B62CF4D1
 for <freebsd-questions@freebsd.org>; Thu, 14 Aug 2014 07:14:41 +0000 (UTC)
Received: from relay2.tomsk.ru (mail.sibptus.tomsk.ru [212.73.124.5])
 by mx1.freebsd.org (Postfix) with ESMTP id 229C22CE7
 for <freebsd-questions@freebsd.org>; Thu, 14 Aug 2014 07:14:40 +0000 (UTC)
X-Virus-Scanned: by clamd daemon 0.98.1 for FreeBSD at relay2.tomsk.ru
Received: from admin.sibptus.tomsk.ru (account sudakov@sibptus.tomsk.ru
 [212.73.125.240] verified)
 by relay2.tomsk.ru (CommuniGate Pro SMTP 5.1.16)
 with ESMTPSA id 36318563 for freebsd-questions@freebsd.org;
 Thu, 14 Aug 2014 14:14:39 +0700
Received: from admin.sibptus.tomsk.ru (sudakov@localhost [127.0.0.1])
 by admin.sibptus.tomsk.ru (8.14.7/8.14.7) with ESMTP id s7E7EdJR066135
 for <freebsd-questions@freebsd.org>; Thu, 14 Aug 2014 14:14:39 +0700 (NOVT)
 (envelope-from vas@mpeks.tomsk.su)
Received: (from sudakov@localhost)
 by admin.sibptus.tomsk.ru (8.14.7/8.14.7/Submit) id s7E7EdYc066134
 for freebsd-questions@freebsd.org; Thu, 14 Aug 2014 14:14:39 +0700 (NOVT)
 (envelope-from vas@mpeks.tomsk.su)
X-Authentication-Warning: admin.sibptus.tomsk.ru: sudakov set sender to
 vas@mpeks.tomsk.su using -f
Date: Thu, 14 Aug 2014 14:14:39 +0700
From: Victor Sudakov <vas@mpeks.tomsk.su>
To: freebsd-questions@freebsd.org
Subject: Re: NAT question
Message-ID: <20140814071439.GD64974@admin.sibptus.tomsk.ru>
References: <3hYH0x3vTtzCy1h@baobab.bilink.it>
 <CA+tpaK0+YnEzagH--VnyNqpYArH2eVnmVhQEcR3ST8yYtRJZ+w@mail.gmail.com>
 <53EBB8FF.6040504@a1poweruser.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <53EBB8FF.6040504@a1poweruser.com>
Organization: AO "Svyaztransneft", SibPTUS
X-PGP-Key: http://www.dreamwidth.org/pubkey?user=victor_sudakov
X-PGP-Fingerprint: 10E3 1171 1273 E007 C2E9  3532 0DA4 F259 9B5E C634
User-Agent: Mutt/1.5.21 (2010-09-15)
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Aug 2014 07:14:41 -0000

Fbsd8 wrote:
> Disregard that last post. ipfilter was updated to the current version 5 
> in RELEASE 10.0 and I think also for 9.3. Been using ipfilter since 
> RELEASE 4.0 without any problems. Its rock hard and easy to use.

I liked its syntax and would still use it if it could nat PPTP (GRE)
correctly. Unfortunately this missing feature was a show-stopper for
me.

Natting more than one PPTP session requires special support which was
missing in ipnat. It is even missing in some commercial hardware
NASes, so I am not complaining.


-- 
Victor Sudakov