Bernd Ernesti <netbsd@arresum.inka.de> writes:

> You also have to enable ipf in /etc/rc.conf because ipnat needs a runing
> ipf. And don't forget to create a empty /etc/ipf.conf file, because
> /etc/netstart checks if this file exists and aborts if it doesn't find it.

Enabling `ipfilter' (that's probably what you mean) in /etc/rc.conf is
*not* necessary for ipnat-only operation.