Kernel Config for NAT

Robert Huff roberthuff at rcn.com
Thu Apr 8 04:28:39 UTC 2010


Adam Vande More writes:

>  > I am setting up a router to share one Wi-Fi link between a few computers
>  > that only support CAT-5. Like a wireless access point except wired and
>  > wireless sides are reversed. My question is about the ipfw packet filter.
>  > >From the handbook section on NAT, 31.9.3, I can achieve what I need with
>  > boot loader options. Section 31.9.4 describes alternatives for building a
>  > custom kernel. In contrast, the chapter on ipfw states several times that
>  > NAT requires a custom kernel - 30.6.1, 30.6.2, 30.6.5.7.
>  >
>  > I want to use freebsd-update and building a custom kernel eliminates that
>  > option.
>  >
>  > Which is correct? Do I need to build a custom kernel to use NAT?
>  
>  You don't need to do build a custom kernel anymore, that's a
>  relatively recent change.  Another option is to use pf instead
>  ipfw since it has built-in NAT.  I'm not saying you should change
>  as your current path has worked great for me for many years.

	If compiled into the kernel, there's a set of optional settings
(VERBOSE, LOG_LINIT, DEFAULT_TO_ACCEPT, etc) that can be set there.
	If using the module, how does one set these?



						Robert Huff





More information about the freebsd-questions mailing list