From owner-freebsd-questions@FreeBSD.ORG Thu Apr 8 04:28:39 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8B5EF1065670 for ; Thu, 8 Apr 2010 04:28:39 +0000 (UTC) (envelope-from roberthuff@rcn.com) Received: from smtp02.lnh.mail.rcn.net (smtp02.lnh.mail.rcn.net [207.172.157.102]) by mx1.freebsd.org (Postfix) with ESMTP id 4DC3F8FC08 for ; Thu, 8 Apr 2010 04:28:38 +0000 (UTC) Received: from mr02.lnh.mail.rcn.net ([207.172.157.22]) by smtp02.lnh.mail.rcn.net with ESMTP; 08 Apr 2010 00:28:38 -0400 Received: from mx04.lnh.mail.rcn.net (mx04.lnh.mail.rcn.net [207.172.157.54]) by mr02.lnh.mail.rcn.net (MOS 3.10.8-GA) with ESMTP id QPW97243; Thu, 8 Apr 2010 00:28:29 -0400 (EDT) Received: from 209-6-91-204.c3-0.smr-ubr1.sbo-smr.ma.cable.rcn.com (HELO jerusalem.litteratus.org.litteratus.org) ([209.6.91.204]) by smtp04.lnh.mail.rcn.net with ESMTP; 08 Apr 2010 00:28:29 -0400 From: Robert Huff MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <19389.23404.649946.265403@jerusalem.litteratus.org> Date: Thu, 8 Apr 2010 00:28:28 -0400 To: Adam Vande More In-Reply-To: References: <201004080252.o382qFH7019790@leka.aloha.com> X-Mailer: VM 7.17 under 21.5 (beta28) "fuki" XEmacs Lucid X-Junkmail-Whitelist: YES (by domain whitelist at mr02.lnh.mail.rcn.net) Cc: Gary Dunn , freebsd-questions Subject: Re: Kernel Config for NAT X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Apr 2010 04:28:39 -0000 Adam Vande More writes: > > I am setting up a router to share one Wi-Fi link between a few computers > > that only support CAT-5. Like a wireless access point except wired and > > wireless sides are reversed. My question is about the ipfw packet filter. > > >From the handbook section on NAT, 31.9.3, I can achieve what I need with > > boot loader options. Section 31.9.4 describes alternatives for building a > > custom kernel. In contrast, the chapter on ipfw states several times that > > NAT requires a custom kernel - 30.6.1, 30.6.2, 30.6.5.7. > > > > I want to use freebsd-update and building a custom kernel eliminates that > > option. > > > > Which is correct? Do I need to build a custom kernel to use NAT? > > You don't need to do build a custom kernel anymore, that's a > relatively recent change. Another option is to use pf instead > ipfw since it has built-in NAT. I'm not saying you should change > as your current path has worked great for me for many years. If compiled into the kernel, there's a set of optional settings (VERBOSE, LOG_LINIT, DEFAULT_TO_ACCEPT, etc) that can be set there. If using the module, how does one set these? Robert Huff