Kernel Config for NAT
Robert Huff
roberthuff at rcn.com
Thu Apr 8 04:28:39 UTC 2010
Adam Vande More writes:
> > I am setting up a router to share one Wi-Fi link between a few computers
> > that only support CAT-5. Like a wireless access point except wired and
> > wireless sides are reversed. My question is about the ipfw packet filter.
> > >From the handbook section on NAT, 31.9.3, I can achieve what I need with
> > boot loader options. Section 31.9.4 describes alternatives for building a
> > custom kernel. In contrast, the chapter on ipfw states several times that
> > NAT requires a custom kernel - 30.6.1, 30.6.2, 30.6.5.7.
> >
> > I want to use freebsd-update and building a custom kernel eliminates that
> > option.
> >
> > Which is correct? Do I need to build a custom kernel to use NAT?
>
> You don't need to do build a custom kernel anymore, that's a
> relatively recent change. Another option is to use pf instead
> ipfw since it has built-in NAT. I'm not saying you should change
> as your current path has worked great for me for many years.
If compiled into the kernel, there's a set of optional settings
(VERBOSE, LOG_LINIT, DEFAULT_TO_ACCEPT, etc) that can be set there.
If using the module, how does one set these?
Robert Huff
More information about the freebsd-questions
mailing list