natd -redirect_port

[Micheal Patterson]

----- Original Message ----- 
From: "JJB" <Barbish3 at adelphia.net>
To: "Christian Hiris" <4711 at chello.at>; <freebsd-questions at freebsd.org>
Cc: "Anthony Philipp" <philipp1 at itg.uiuc.edu>
Sent: Saturday, May 15, 2004 8:05 AM
Subject: RE: natd -redirect_port


> You are wrong, you do not have to compile ipfirewall kernel options
> into the kernel.
> IPFW is delivered as an bootable module.
> You need this in rc.conf to enable ipfw, it will auto load the
> bootable module.
>
> # Required For IPFW  kernel firewall support
> firewall_enable="YES"              # Start daemon
> firewall_script="/etc/ipfw.rules"  # run my custom rules
> firewall_logging="YES"            # Enable events logging
>
> natd_enable="YES"                 # Enable IPFW nat function
> natd_interface="rl0"
> natd_flags="-dynamic -m -u -f /etc/natd.conf"
>

You're right, you don't have to recompile to use ipfw, however, since there
is no divert module, the kernel will still need to be recompiled to enable
divert. In order for the OP to do what they're wanting to do they will still
need to recompile kernel and restart the system.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.