I have two networks: and

Default gateway to the Internet is and my gateway system gets assigned on the external interface and has on the internal interface.

I don't want to run a firewall or have a pf or ipfw ruleset - I just want a simple gateway between the two networks.

My config in rc.conf contains:

gateway_enable="yes" static_routes="route1" route_route1="-net"

With this configuration, the gateway itself is connected to the Internet and works properly - but all of the internal hosts have no connectivity.

I'd really like to have a dead simple gateway with nothing but gateway_enable="yes" and a single, static route ... but I wonder if this is not possible because both networks are non-routable, private address space ?

Do I require NAT in this situation, or is it possible to have a simple router with no NAT or firewall config ?

Thank you.

  • You should probably include a diagram. It's not clear whether both of these networks are administered by you. What device is and does it know anything about – Richard Smith Dec 8 '17 at 10:00
  • The is a cable modem that I don't think I can administer or add routes to ... – user227963 Dec 8 '17 at 18:43
  • I think that the answer to you question is that you will need to use a 2nd NAT. Routes are bidirectional. You can use default routes to point towards the Internet, but every node needs to understand how to route the packets back in the reciprocal direction. – Richard Smith Dec 8 '17 at 19:51

Your network configuration is not clear. I think that you are missing a route. The internet gateway might be unaware that there is a network behind If you can check the internet gateway configuration and add a static route to via you will not need any NAT. Otherwise you will definitely need to enable NAT on your gateway.

  • The main router is a cable modem that is giving out the addresses and I don't think I have any ability to add a route to it. So in order to have a very simple gateway without NAT I need to set up a route on the downstream gateway .... thanks. – user227963 Dec 8 '17 at 18:41

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.