Subject: Slow pf NAT To: None <> From: None <> List: current-
users Date: 11/07/2004 02:46:10 Now having implemented NetBSD as
an internet gateway (whichs works royally well besides the
following problem), I've come across ipfilter and how it really
isn't that great. The natural step in this case is to try pf.
By some remarkable coincidence security/pflkm appeared in pkgsrc
today, so I tried it. Installed and loaded fine, but regardless
of what rules I try (including default), any NATted operation
(i.e. anything happening on my client machines through the pf
gateway) is amazingly slow and likely to fail. DNS lookups can
take 5 seconds, page loads for even Google can take longer if
they work at all, and so on. This does not happen from the
gateway itself, nor did it happen with ipfilter.  So, thinking
it was some friction between pflkm and my running kernel, I
cvs'd to -current and built that with the internal pf - having
first removed pflkm. This behaved in exactly the same way, which
is even stranger.  As my