Re: nat and ipfw - divert or builtin

2007-09-24 Thread Christer Hermansson
Randy Bush wrote: divert ipnat ipfw's integrated nat I believe the integrated version makes configuration simpler. I would choose the old classic divert with ipfw if it is for a important network that must work, but if I was running -current I would try the integrated variant beacuse it seems to

Re: Re: nat and ipfw - divert or builtin

2007-09-24 Thread Randy Bush
> divert > ipnat > ipfw's integrated nat > > I believe the integrated version makes configuration simpler. I would > choose the old classic divert with ipfw if it is for a important network > that must work, but if I was running -current I would try the integrated > variant beacuse it seems to be

Re: nat and ipfw - divert or builtin

2007-09-23 Thread Christer Hermansson
Randy Bush wrote: freebsd-current i386 / soekris i used to use ipfw to divert to natd. so, when i went to configure a new nat box nat box today, i was 82.3% there when i hit a bunch of nat stuff in ipfw that i do not remember seeing before. it appears that ipfw will nat all on its own without

Re: nat and ipfw - divert or builtin

2007-09-23 Thread Randy Bush
> I believe the integrated version makes configuration simpler. I would > choose the old classic divert with ipfw if it is for a important network > that must work, but if I was running -current I would try the integrated > variant beacuse it seems to be simpler to use. and one less daemon. less

nat and ipfw - divert or builtin

2007-09-22 Thread Randy Bush
freebsd-current i386 / soekris i used to use ipfw to divert to natd. so, when i went to configure a new nat box nat box today, i was 82.3% there when i hit a bunch of nat stuff in ipfw that i do not remember seeing before. it appears that ipfw will nat all on its own without natd and divert. wh