patjensen
Joined 2 years ago
Karma
29
Submissions
17
Member since
Mar 19
Distinguished Architect & Inventor @zoom, CCIE #53452
View on Hacker NewsJoined 2 years ago
Why don't you contribute? Are you comfortable just taking from society?
You can scope it to just your IPsec service, or whatever it is your hosting, or you can enable full cone for the whole subnet.
It is not DNAT, nor is it port forwarding. If you host a SIP proxy, SBC or peer to peer gaming, it will enable these use cases as well.
https://docs.netgate.com/pfsense/en/latest/nat/outbound.html
It started in 7.3 with the frame buffer changes and the only workaround was to disable the kernel driver.
Maybe more people will get to try out OpenBSD successfully now.