>>>>> "James" == James Wetterau <jwjr@ignition.name.net> writes:
    James>      Please Note That ipnat is not functional without ipf(8) running.  In ad-
    James>      dition, the following kernel options need to be turned on in order to use
    James>      ipnat: GATEWAY, IPFORWARDING and PFIL_HOOKS.  The sysctl

  Is "pass in all" / "pass out all" enough to cause ipf to be running, or is
"ipf -E" enough? I failed to make ipnat work in a hotel room last month for
my colleague who didn't have a modem.

]      Out and about in Ottawa.    hmmm... beer.                |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [