Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 8 Apr 2010 00:28:28 -0400
From:      Robert Huff <roberthuff@rcn.com>
To:        Adam Vande More <amvandemore@gmail.com>
Cc:        Gary Dunn <osp@aloha.com>, freebsd-questions <freebsd-questions@freebsd.org>
Subject:   Re: Kernel Config for NAT
Message-ID:  <19389.23404.649946.265403@jerusalem.litteratus.org>
In-Reply-To: <x2m6201873e1004072052u88a62b4eo7d1e9a457240937a@mail.gmail.com>
References:  <201004080252.o382qFH7019790@leka.aloha.com> <x2m6201873e1004072052u88a62b4eo7d1e9a457240937a@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

Adam Vande More writes:

>  > I am setting up a router to share one Wi-Fi link between a few computers
>  > that only support CAT-5. Like a wireless access point except wired and
>  > wireless sides are reversed. My question is about the ipfw packet filter.
>  > >From the handbook section on NAT, 31.9.3, I can achieve what I need with
>  > boot loader options. Section 31.9.4 describes alternatives for building a
>  > custom kernel. In contrast, the chapter on ipfw states several times that
>  > NAT requires a custom kernel - 30.6.1, 30.6.2, 30.6.5.7.
>  >
>  > I want to use freebsd-update and building a custom kernel eliminates that
>  > option.
>  >
>  > Which is correct? Do I need to build a custom kernel to use NAT?
>  
>  You don't need to do build a custom kernel anymore, that's a
>  relatively recent change.  Another option is to use pf instead
>  ipfw since it has built-in NAT.  I'm not saying you should change
>  as your current path has worked great for me for many years.

	If compiled into the kernel, there's a set of optional settings
(VERBOSE, LOG_LINIT, DEFAULT_TO_ACCEPT, etc) that can be set there.
	If using the module, how does one set these?



						Robert Huff






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19389.23404.649946.265403>