6 Replies to “IPFW3 and NAT”

1. Anonymous says:

   2015/06/24 at 22:39

   it is a in-kernel NAT

2. Nans says:

   2015/06/25 at 09:19

   I’ve made some small changes and it worked like a charm (INT-NIC: bnx0, OUT-NIC: bnx1):

   #!/bin/sh
   kldload ipfw3_nat
   kldload ipfw3_layer4

   ipfw3 flush

   ipfw3 add allow all via lo0
   ipfw3 add allow all via bnx0

   ipfw3 nat 1 config if bnx1
   ipfw3 add nat 1 tcp via bnx1

   ipfw3 add check-state
   ipfw3 add deny tcp established
   ipfw3 add allow all out via bnx1 keep-state

   ipfw3 add deny all

3. DragonCanFly says:

   2015/06/25 at 16:09

   >> it is a in-kernel NAT
   >>
   What does it mean?

4. Nobody says:

   2015/06/25 at 16:59

   Is pf also an in-kernel NAT in Dfly?

5. bycn82 says:

   2015/06/26 at 04:57

   Nice,
   I like your script, it is clean and clear.

6. bycn82 says:

   2016/01/20 at 19:50

   the ipfw3 doc has been moved to https://www.dragonflybsd.org/docs/ipfw3/

Comments are closed.