Subject: Re: users : IPNAT needs IPF?
To: None <netbsd-users@netbsd.org>
From: Jens A Nilsson <jnilsson@ludd.luth.se>
List: netbsd-users
Date: 02/11/1999 22:21:13
Olli <oliverko@dialup.nacamar.de>,wrote on Feb 11, 1999 at 18:15 +0100:
> Hi all,
>
> I have a question. If I need IP-NAT I also have to enable
> IP-Filtering?
Yes, "ipf -E" turns on NAT and filtering.
>
> For IPF on NetBSD-1.3.2 I have to recompile the kernel (options IPF)?
this comes from GENERIC:
pseudo-device ipfilter # IP filter (firewall) and NAT
> A config-file is necessary :
>
> # /etc/ipf.conf
> block out on ppp0 from 192.168.1.0/24 to any
> block in on ppp0 from any to 192.168.1.0/24
>
> MY this be right?
That seems to do what you want.
--
mvh Jens