Hello,

pf seems to do NAT forwarding whether or not net.inet.ip.forwarding is
enabled. I set up a NAT between my webserver jail on lo1 and my
external interface on em0, and it works even when this setting is
disabled.

Here is the relevant part of my pf.conf:
nat on em0 from lo1 to any -> (em0)

Why does this work? Shouldn't pf be unable to forward packets when
net.inet.ip.forwarding=0?

- Serguey
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[email protected]"

Reply via email to