Re: NAT problems 14.3+

Karl Denninger <[email protected]> Mon, 4 May 2026 12:50:18 -0400
Newsgroups gmane.os.freebsd.devel.ipfw
Message-ID <[email protected]>
This is a cryptographically signed message in MIME format.

--------------ms030801000905030106060806
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64
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--------------ms030801000905030106060806
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms030801000905030106060806--