Recompile kernel or module for ipfw+nat?

Christer Hermansson mail at
Wed Sep 24 18:13:14 UTC 2008

n j wrote:
> Hello everyone,
> I have a quick question regarding the setup of nat with ipfw.
> According to the handbook:
> "The following options must be in the kernel configuration file:
> options IPFIREWALL
> options IPDIVERT"
> however, there is a kernel module called ipdivert.ko similar to
> ipfw.ko for the firewall.
> Is it still necessary to recompile the kernel in order to use nat with
> ipfw? Or, to put it another way, is there a possibility to use nat and
> keep the generic kernel?
> Thanks for any input,
You can choose to use the modules or make it static by recompile the kernel.

IMHO the ipnat(8) is a more simple way to get nat.


Christer Hermansson

More information about the freebsd-questions mailing list