Two tips 1) did you set up the divert to natd in your ipfw rules? 2) if you do the dig on the machine where natd is running and the external IP is routed over lo0 locally, ipfw will not see the packets as incoming on the interface where the IP is bound. So that means they will not match the ipfw rules that divert the packets to natd. I suggest trying the dig from a different host.
Doc
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message
