ipfw FreeBSD 10

Robert Huff roberthuff at rcn.com
Wed Apr 11 12:12:10 UTC 2012


KES writes:

>  building kernel with this options:
>  options         IPFIREWALL              #enable ipfw
>  options         IPFIREWALL_VERBOSE      #enable log
>  options         IPFIREWALL_FORWARD      #enable fwd
>  options         IPDIVERT
>  options         LIBALIAS
>  options         IPFIREWALL_NAT          #enable nat
>  
>  do not enable IPFW
>  
>  When doing 
>  ipfw show
>  it shows
>  0000000  93874234  23402394820384 any to any
>  and stops

	I have IPFW working, eith:

options  IPFIREWALL_VERBOSE      #enable logging to syslogd(8)
options  IPFIREWALL_FORWARD
options  IPFIREWALL_VERBOSE_LIMIT=100    #limit verbosity

	in the kernel config file, and :

ipfw_load="YES"
ipfw_nat_load="YES"	# in-kernel ipfw nat
libalias_load="YES"	# for in-kernel ipfw nat

	in /boot/loader.conf.
	(Note: the available documentation for basic IPFW is good.
However, if you want to do NAT, the information - in the IPFW man
page and the Handbook - extremely confusing.  It took me a week
and some expert help to get this working.)

	Respectfully,


			Robert Huff




More information about the freebsd-questions mailing list