From owner-freebsd-questions@FreeBSD.ORG Thu Apr 8 21:13:10 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0BED9106564A for ; Thu, 8 Apr 2010 21:13:10 +0000 (UTC) (envelope-from roberthuff@rcn.com) Received: from smtp02.lnh.mail.rcn.net (smtp02.lnh.mail.rcn.net [207.172.157.102]) by mx1.freebsd.org (Postfix) with ESMTP id C450B8FC08 for ; Thu, 8 Apr 2010 21:13:09 +0000 (UTC) Received: from mr02.lnh.mail.rcn.net ([207.172.157.22]) by smtp02.lnh.mail.rcn.net with ESMTP; 08 Apr 2010 17:13:09 -0400 Received: from smtp01.lnh.mail.rcn.net (smtp01.lnh.mail.rcn.net [207.172.4.11]) by mr02.lnh.mail.rcn.net (MOS 3.10.8-GA) with ESMTP id QPY12746; Thu, 8 Apr 2010 17:13:08 -0400 (EDT) Received: from 209-6-91-204.c3-0.smr-ubr1.sbo-smr.ma.cable.rcn.com (HELO jerusalem.litteratus.org.litteratus.org) ([209.6.91.204]) by smtp01.lnh.mail.rcn.net with ESMTP; 08 Apr 2010 17:13:09 -0400 From: Robert Huff MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <19390.18148.153419.394812@jerusalem.litteratus.org> Date: Thu, 8 Apr 2010 17:13:08 -0400 To: "Gary Dunn" In-Reply-To: <201004082043.o38KhiFi015433@leka.aloha.com> References: <201004082043.o38KhiFi015433@leka.aloha.com> X-Mailer: VM 7.17 under 21.5 (beta28) "fuki" XEmacs Lucid X-Junkmail-Whitelist: YES (by domain whitelist at mr02.lnh.mail.rcn.net) Cc: freebsd-questions Subject: Re: Kernel Config for NAT X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Apr 2010 21:13:10 -0000 > IMHO, and according to Adam Vandr More, kernel options are no > longer required. The original reason I asked was: 30.6.2 Kernel Options It is not a mandatory requirement to enable IPFW by compiling the following options into the FreeBSD kernel, unless NAT functionality is required. I do want NAT, and there is no unambiguous path in the Handbook. > Still need entries in /etc/rc.conf. See HB 30.9.5, 30.6.3, > 30.6.5.7 Once ipfw is running, I should have the rulesets covered. Robert Huff