Subject: Re: IPNAT
To: Erik Rungi <blackbox@openface.ca>
From: Mike Pumford <mpumford@black-star.demon.co.uk>
List: current-users
Date: 10/22/1998 21:32:14
>
> Hiya,
>
> After spending a bit of time pulling my hair out, I have realized that under
> the configuration I'm using (NetBSD-1.3/i386), ipnat doesn't work unless ipf
> is enabled.
>
> Maybe this is obvious to some, but I think that it would be a good thing if:
>
> 1. ipnat would warn you that its not going to be doing any mapping until you
> run "/sbin/ipf",
>
> and/or
>
If you have an up to date /etc enabling IPNAT in rc.conf automatically sets up
ipf for you. So it does not really need a man page entry. Although I can see
that while experimenting before enabling it for real it would be useful to
know as I have also spent significant time wondering why it did not work.
> eg "Please note that ipnat will not actually rewrite any packet headers unless
> the ipf packet filter is active."
>
> Mentioning in the ipnat(8) man page which kernel options are required to make
> nat go zoom would be handy as well.
>
This I would definitely support. It was only by scanning back through large
amounts of current-users mail that I managed to find the options required.
Mike
> EJR
>