Kernel Config for NAT

Adam Vande More amvandemore at gmail.com
Thu Apr 8 03:52:45 UTC 2010


On Wed, Apr 7, 2010 at 9:51 PM, Gary Dunn <osp at aloha.com> wrote:

> I am setting up a router to share one Wi-Fi link between a few computers
> that only support CAT-5. Like a wireless access point except wired and
> wireless sides are reversed. My question is about the ipfw packet filter.
> >From the handbook section on NAT, 31.9.3, I can achieve what I need with
> boot loader options. Section 31.9.4 describes alternatives for building a
> custom kernel. In contrast, the chapter on ipfw states several times that
> NAT requires a custom kernel - 30.6.1, 30.6.2, 30.6.5.7.
>
> I want to use freebsd-update and building a custom kernel eliminates that
> option.
>
> Which is correct? Do I need to build a custom kernel to use NAT?
>

You don't need to do build a custom kernel anymore, that's a relatively
recent change.  Another option is to use pf instead ipfw since it has
built-in NAT.  I'm not saying you should change as your current path has
worked great for me for many years.

-- 
Adam Vande More


More information about the freebsd-questions mailing list