Recompile kernel or module for ipfw+nat?

Christer Hermansson mail at chdevelopment.se
Wed Sep 24 18:13:14 UTC 2008


n j wrote:
> Hello everyone,
>
> I have a quick question regarding the setup of nat with ipfw.
> According to the handbook:
>
> "The following options must be in the kernel configuration file:
> options IPFIREWALL
> options IPDIVERT"
>
> however, there is a kernel module called ipdivert.ko similar to
> ipfw.ko for the firewall.
>
> Is it still necessary to recompile the kernel in order to use nat with
> ipfw? Or, to put it another way, is there a possibility to use nat and
> keep the generic kernel?
>
> Thanks for any input,
>   
You can choose to use the modules or make it static by recompile the kernel.

IMHO the ipnat(8) is a more simple way to get nat.

-- 

Christer Hermansson

http://www.chdevelopment.se




More information about the freebsd-questions mailing list