NAT without recompiling my kernel ?
freebsd-questions at penguinpowered.org
Mon Sep 15 12:54:10 PDT 2003
I've got ipfw working and logging without recompiling my kernel. I've
now hit my next problem...
Is it possible to use NAT without recompiling ? I've kldloaded the
dummynet module, and included that in /boot/loader.conf, but when I
reboot, I get the following in my dmesg :
IP packet filtering initialized, divert disabled, rule-based forwarding
enabled, default to deny, logging disabled
Is there any way to set divert enabled without recompiling my kernel
with IPDIVERT included?
For the record, the relevant section of my rc.conf is as follows:
When I try and add natd by doing
ipfw add 50 divert natd all from any to any via xl0
ipfw: getsockopt(IP_FW_ADD): Invalid argument
and in /var/log/messages I get
Sep 15 20:54:27 marvin /kernel: ip_fw_ctl: invalid command
xl0 is my private network IP by the way
I laugh in the face of danger... Then I
run and hide until it goes away!
More information about the freebsd-questions