At 9:17 PM +0100 2/3/2001, Michael Kukat wrote:
>
>Did you compile the kernel with
>
>pseudo-device   ipfilter                # IP filter (firewall) and NAT
>
>installed? Didn't try ipf/ipnat on VAX, but as the binaries exist, there is
>a good chance for this to work there also. ipfilter should be platform-
>independant.


     I didn't build a new kernel, but I enabled it at the command line 
and it returned a "1". From the manual:


>To use IPNAT, in the kernel configuration file the "pseudo-device 
>ipfilter" must be enabled in the kernel. To
>check if it is enabled in the current kernel:
>
># sysctl net.inet.ip.forwarding
>net.inet.ip.forwarding = 1
>
>If the result is "1" as in the previous example, the option is 
>enabled, otherwise, if the result is "0" the option
>is disabled. You can do two things:
>
>   1.Compile a new kernel, with the GATEWAY option enabled by default.
>
>   2.Enable the option in the current kernel with the following command:
>
>      # sysctl -w net.inet.ip.forwarding=1