- NetBSD Manual Pages
Powered by man-cgi (2020-09-24).
Maintained for NetBSD
by Kimmo Suominen.
Based on man-cgi by Panagiotis Christias.
ipnat - user interface to the NAT subsystem
ipnat [ -dhlnrsvCF ] [ -M core ] [ -N system ] -f <filename>
ipnat opens the filename given (treating "-" as stdin) and parses the
file for a set of rules which are to be added or removed from the IP
Each rule processed by ipnat is added to the kernels internal lists if
there are no parsing problems. Rules are added to the end of the
internal lists, matching the order in which they appear when given to
Note that ipf(8) must be enabled (with ipf -E) before NAT is config-
ured, as the same kernel facilities are used for NAT functionality. In
addition, packet forwarding must be enabled. These details may be han-
dled automatically when ipnat is run by rc at normal system startup.
See options(4), sysctl(8), and rc.conf(5) for more information.
-C delete all entries in the current NAT rule listing (NAT rules)
-d Enable printing of some extra debugging information.
-F delete all active entries in the current NAT translation table
(currently active NAT mappings)
-h Print number of hits for each MAP/Redirect filter.
-l Show the list of current NAT table entry mappings.
-n This flag (no-change) prevents ipf from actually making any
ioctl calls or doing anything which would alter the currently
-r Remove matching NAT rules rather than add them to the internal
-s Retrieve and display NAT statistics.
-v Turn verbose mode on. Displays information relating to rule
processing and active rules/table entries.
/usr/share/examples/ipf Directory with examples.
ioctl(SIOCGNATS): Input/output error Ensure that the necessary kernel
functionality is present and ipf enabled with ipf -E.
ipnat(5), rc.conf(5), ipf(8), ipfstat(8)