Subject: Re: users : IPNAT needs IPF?
To: None <netbsd-users@netbsd.org>
From: Jens A Nilsson <jnilsson@ludd.luth.se>
List: netbsd-users
Date: 02/11/1999 22:21:13
Olli <oliverko@dialup.nacamar.de>,wrote on Feb 11, 1999 at 18:15 +0100: 
> Hi all,
> 
> I have a question. If I need IP-NAT I also have to enable
> IP-Filtering?
Yes, "ipf -E" turns on NAT and filtering.

> 
> For IPF on NetBSD-1.3.2 I have to recompile the kernel (options IPF)?
this comes from GENERIC:
pseudo-device   ipfilter        # IP filter (firewall) and NAT

> A config-file is necessary :
> 
> # /etc/ipf.conf
> block out on ppp0 from 192.168.1.0/24 to any
> block in on ppp0 from any to 192.168.1.0/24
> 
> MY this be right?
That seems to do what you want.

-- 
mvh Jens