Runtime control for the IPFIREWALL_FORWARD

[Julian Elischer]

Andrey V. Elsukov wrote:
> Hi, All!
> 
> I want get the IPFIREWALL_FORWARD feature without a kernel rebuild.
> And use forwarding with the ipfw kld. It's possible to have this 
> functional in the base system?  If yes, then which is preferred way: 
> sysctl or kld?
> 

This introduces quite a bit of extra code into the path of IP packets.
Some people are very sensitive about anything that slows down that path.