Return to nat.2 CVS log

Up to [local] / src / share / ipf

Annotation of src/share/ipf/nat.2, Revision 1.5

1.2       kstailey    1:                 Miscellaneous NAT Configuration Tips
                      2:
1.4       d           3: Don't forget to add "net.inet.ip.forwarding=1" to /etc/sysctl.conf or NAT will
1.2       kstailey    4: not work.  NAT requires IP packet forwarding.
                      5:
1.3       kstailey    6: Don't forget to add "option IPFILTER" (and maybe "option IPFILTER_LOG"
                      7: if you want ipmon(8) to work) to the kernel config file or NAT will
                      8: not work.  NAT requires the IPF packet filter.
                      9:
1.2       kstailey   10: You must have IPF enabled even if you aren't using it for anything or
                     11: NAT will not work.  The standard way to do this is to make sure
                     12: /etc/ipf.rules is installed and edit /etc/rc.conf changing
                     13: "ipfilter=NO" to "ipfilter=YES" then reboot.
1.5     ! kstailey   14:
        !            15: When you bring up NAT it needs the interface to have an address.  If you are
        !            16: using the ppp0 interface unless you start pppd from /etc/rc you cannot start
        !            17: NAT there.  Instead, in the /etc/ppp/ip-up shell script add
        !            18:
        !            19: /sbin/ipnat -CF -f /etc/ipnat.rules
        !            20:
        !            21: to start NAT when the link comes up and the interface has an address.