From 68069e04996eb9d8912a2425b064ec537598fc9f Mon Sep 17 00:00:00 2001
From: Tom Rhodes <trhodes@FreeBSD.org>
Date: Fri, 6 Dec 2002 21:00:13 +0000
Subject: [PATCH] Add a section on using user-level PPP NAT to the handbook

PR:		44443
Submitted by:	Dmitry Morozovsky <marck@rinet.ru>
Approved by:	make lint
---
 .../books/handbook/ppp-and-slip/chapter.sgml  | 27 +++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/en_US.ISO8859-1/books/handbook/ppp-and-slip/chapter.sgml b/en_US.ISO8859-1/books/handbook/ppp-and-slip/chapter.sgml
index 6f042540d5..7339269a9a 100644
--- a/en_US.ISO8859-1/books/handbook/ppp-and-slip/chapter.sgml
+++ b/en_US.ISO8859-1/books/handbook/ppp-and-slip/chapter.sgml
@@ -1280,6 +1280,33 @@ set nbns 203.14.100.5</programlisting>
 	</sect4>
       </sect3>
 
+      <sect3 id="userppp-nat">
+       <title>Using PPP Network Address Translation Capability</title>
+       <indexterm><primary>PPP</primary><secondary>NAT</secondary></indexterm>
+
+       <para>PPP has ability to use internal NAT without kernel diverting
+         capabilities. This functionality may be enabled by the following 
+         line in <filename>/etc/ppp/ppp.conf</filename>:</para>
+
+       <programlisting>nat enable yes</programlisting>
+
+       <para>Alternatively, PPP NAT may be enabled by command-line
+         option <literal>-nat</literal>. There is also 
+         <filename>/etc/rc.conf</filename> knob named 
+         <literal>ppp_nat</literal>, which is enabled by default.</para>
+
+       <para>If you use this feature, you may also find useful
+         the following <filename>/etc/ppp/ppp.conf</filename> options
+         to enable incoming connections forwarding:</para>
+
+       <programlisting>nat port tcp 10.0.0.2:ftp ftp
+nat port tcp 10.0.0.2:http http</programlisting>
+
+       <para>or don't trust the outside at all</para>
+
+       <programlisting>nat deny_incoming yes</programlisting>
+      </sect3>
+
       <sect3 id="userppp-final">
 	<title>Final System Configuration</title>
 	<indexterm><primary>PPP</primary><secondary>configuration</secondary></indexterm>