Recompile kernel or module for ipfw+nat?

n j nino80 at
Tue Sep 23 16:20:20 UTC 2008

Hello everyone,

I have a quick question regarding the setup of nat with ipfw.
According to the handbook:

"The following options must be in the kernel configuration file:
options IPDIVERT"

however, there is a kernel module called ipdivert.ko similar to
ipfw.ko for the firewall.

Is it still necessary to recompile the kernel in order to use nat with
ipfw? Or, to put it another way, is there a possibility to use nat and
keep the generic kernel?

Thanks for any input,

More information about the freebsd-questions mailing list