From owner-freebsd-questions@FreeBSD.ORG  Sat Feb  1 09:05:19 2014
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 1F61719E
 for <freebsd-questions@freebsd.org>; Sat,  1 Feb 2014 09:05:19 +0000 (UTC)
Received: from sola.nimnet.asn.au (paqi.nimnet.asn.au [115.70.110.159])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id 895BE1D44
 for <freebsd-questions@freebsd.org>; Sat,  1 Feb 2014 09:05:17 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by sola.nimnet.asn.au (8.14.2/8.14.2) with ESMTP id s118l8bT035178;
 Sat, 1 Feb 2014 19:47:09 +1100 (EST)
 (envelope-from smithi@nimnet.asn.au)
Date: Sat, 1 Feb 2014 19:47:08 +1100 (EST)
From: Ian Smith <smithi@nimnet.asn.au>
To: Michael Sierchio <kudzu@tenebras.com>
Subject: Re: Necessary to implement static NAT 1:1
In-Reply-To: <mailman.6090.1391033595.1398.freebsd-questions@freebsd.org>
Message-ID: <20140201194118.G99797@sola.nimnet.asn.au>
References: <mailman.6090.1391033595.1398.freebsd-questions@freebsd.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Cc: Joshua Smith <juicewvu@gmail.com>, freebsd-questions@freebsd.org
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 01 Feb 2014 09:05:19 -0000

In freebsd-questions Digest, Vol 504, Issue 5, Message: 31
On Wed, 29 Jan 2014 14:13:01 -0800 Michael Sierchio <kudzu@tenebras.com> wrote:
 > On Wed, Jan 29, 2014 at 2:10 PM, Joshua Smith <juicewvu@gmail.com> wrote:
 > > Just curious why one would use natd instead of the in kernel nat 
 > > available as either part of ipfw or pf.
 > 
 > Kernel nat for ipfirewall requires a custom kernel (GENERIC does not
 > have LIBALIAS).

Not so, Michael.  From /etc/rc.d/ipfw

ipfw_prestart()
{
	if checkyesno dummynet_enable; then
		required_modules="$required_modules dummynet"
	fi
	if checkyesno natd_enable; then
		required_modules="$required_modules ipdivert"
	fi
	if checkyesno firewall_nat_enable; then
		required_modules="$required_modules ipfw_nat"
	fi
}

ipfw_nat.ko is compiled with libalias, and works fine with GENERIC.

cheers, Ian