6 Replies to “IPFW3 and NAT”

  1. Anonymous says:

    it is a in-kernel NAT

  2. Nans says:

    I’ve made some small changes and it worked like a charm (INT-NIC: bnx0, OUT-NIC: bnx1):

    #!/bin/sh
    kldload ipfw3_nat
    kldload ipfw3_layer4

    ipfw3 flush

    ipfw3 add allow all via lo0
    ipfw3 add allow all via bnx0

    ipfw3 nat 1 config if bnx1
    ipfw3 add nat 1 tcp via bnx1

    ipfw3 add check-state
    ipfw3 add deny tcp established
    ipfw3 add allow all out via bnx1 keep-state

    ipfw3 add deny all

  3. DragonCanFly says:

    >> it is a in-kernel NAT
    >>
    What does it mean?

  4. Nobody says:

    Is pf also an in-kernel NAT in Dfly?

  5. bycn82 says:

    Nice,
    I like your script, it is clean and clear.

Comments are closed.