Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Dec 2000 01:05:09 -0800
From:      "Crist J. Clark" <cjclark@reflexnet.net>
To:        Robert Myers <ccrider@whiterose.net>
Cc:        brueggma@snoopie.yi.org, questions@FreeBSD.ORG
Subject:   Re: ipfw/gateway
Message-ID:  <20001221010509.Z96105@149.211.6.64.reflexcom.com>
In-Reply-To: <000101c06ae9$c54e9680$0201a8c0@ccrider2k>; from ccrider@whiterose.net on Wed, Dec 20, 2000 at 03:31:42PM -0500
References:  <20001219200559.A80329@snoopie.yi.org> <000101c06ae9$c54e9680$0201a8c0@ccrider2k>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
On Wed, Dec 20, 2000 at 03:31:42PM -0500, Robert Myers wrote:
> Eric,
> 
> 	You will need to add IP_FORWARD in the kernel config, compile and rebuild.

I am not aware of any such option. If you mean,

  IPFIREWALL_FORWARD

This person does not need it. He does not have any 'fwd' ipfw(8)
rules.

> That option will
> 	allow you to forward packets accross the interfaces.

No, you don't need to compile in extra options for that
functionality.

>  Don't forget to
> enable all the rest of the IPFW
> 	options if you want the ability to deny traffic.....

To do NAT, these,

  options IPFIREWALL
  options IPDIVERT

Options are required. See natd(8).
-- 
Crist J. Clark                           cjclark@alum.mit.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?20001221010509.Z96105>