nat and ipfw - divert or builtin

freebsd-current i386 / soekris

i used to use ipfw to divert to natd. so, when i went to configure a
new nat box nat box today, i was 82.3% there when i hit a bunch of nat
stuff in ipfw that i do not remember seeing before. it appears that
ipfw will nat all on its own without natd and divert.

what's the trade-off? which should i use?

randy
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: Firewall rules
    ... Are you sure this is not just a quirk of IPFW? ... unless you do some gymnastics with skipto rule so ... NAT and keep-state doesn't go to getter because NAT changes the ip ... allow changed traffic afther its bin passed though natd. ...
    (freebsd-questions)
  • Re: Couple of network questions (NAT, firewalls)
    ... ipfw add 500 divert natd all from any to any via re0 ... Just redirects traffic to port 8668 (natd) and from there the natd ... So if I try to make a connection from ... and you are right that it bypasses the nat state table. ...
    (comp.unix.bsd.freebsd.misc)
  • Re: IPFW with user-ppps NAT
    ... user-ppp instead of natd. ... If divert rules are necessary, what argument do I need to pass to action ... If you mean the "nat enable yes" option in ppp.conf, ...
    (freebsd-questions)
  • Re: Problem about ppp -nat
    ... For the ipfw solution, ... ipfw nat, ... My Internet interface is rl0, setup in rc.conf as: ...
    (freebsd-questions)
  • Re: nat and ipfw - divert or builtin
    ... new nat box nat box today, i was 82.3% there when i hit a bunch of nat ... stuff in ipfw that i do not remember seeing before. ... ipfw will nat all on its own without natd and divert. ... I would choose the old classic divert with ipfw if it is for a important network that must work, but if I was running -current I would try the integrated variant beacuse it seems to be simpler to use. ...
    (freebsd-net)