Skip site navigation (1)Skip section navigation (2)
Date:      20 Jul 2005 16:28:16 -0400
From:      Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>
To:        Michael Dexter <dexter@ambidexter.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: 5.x ipdivert.ko with pf and natd?
Message-ID:  <44br4x1au7.fsf@be-well.ilk.org>
In-Reply-To: <a06230974bf02a83b1b75@[192.168.1.100]>
References:  <a06230974bf02a83b1b75@[192.168.1.100]>

next in thread | previous in thread | raw e-mail | index | archive | help
Michael Dexter <dexter@ambidexter.com> writes:

> Hello,
> 
> I would like to use natd with packet filter under FreeBSD 5.4.
> 
> The rc.conf man page states that I want: natd_enable="YES" and that
> "if the kernel was not built with options IPDIVERT, the ipdivert.ko
> kernel module will be loaded."
> 
> Unfortunately, the module ipdivert.ko does not appear to exist in /boot/kernel/
> 
> ... but I do see it in 6.x filesystem.
> 
> I tried building a kernel with:
> 
> options     IPDIVERT
> 
> and that did not appear to produce the module (depends on ipfw though
> I want to use pf?).
> 
> I do however see the source in: /usr/src/sys/netinet/ip_divert.c
> 
> 1. Am I overlooking the prebuilt module in 5.x?
> 2. Can I simply build the module on its own without a full buildkernel?
> 3. Given that buildkernel did not produce it, how can I produce it?

No, I don't see it in the module makefile on my -STABLE machine.
natd *does* depend on ipfw; if you want to use pf, you probably want
to use its built-in NAT capabilities.
If you *do* want natd, you can always compile divert directly into
your kernel. 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44br4x1au7.fsf>