From owner-freebsd-net@FreeBSD.ORG  Sun Mar 21 22:11:23 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C4C8D16A4CE
	for <freebsd-net@freebsd.org>; Sun, 21 Mar 2004 22:11:23 -0800 (PST)
Received: from rackman.netvulture.com
	(adsl-63-197-17-60.dsl.snfc21.pacbell.net [63.197.17.60])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 684B243D3F
	for <freebsd-net@freebsd.org>; Sun, 21 Mar 2004 22:11:23 -0800 (PST)
	(envelope-from vulture@netvulture.com)
Received: from netvulture.com (bigv [192.168.2.130])i2M6B9Pd050381;
	Sun, 21 Mar 2004 22:11:14 -0800 (PST)
Message-ID: <405E8387.70605@netvulture.com>
Date: Sun, 21 Mar 2004 22:11:19 -0800
From: Jonathan Feally <vulture@netvulture.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
	rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Alan Glait <alan@aeg.net.ar>
References: <000801c40f56$e168c380$2e9a59c8@aeg2k>
In-Reply-To: <000801c40f56$e168c380$2e9a59c8@aeg2k>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-MailScanner-Information: Please contact the ISP for more information
X-MailScanner: Found to be clean
cc: freebsd-net@freebsd.org
Subject: Re: NAT
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Mar 2004 06:11:23 -0000

You need to compile a custom kernel with as a minimum
options   IPFIREWALL   # puts ipfw statically into kernel
options   IPDIVERT       # see divert Disable - this will enable it 
which is required for divert rule and natd

You may also want this options
options         IPFIREWALL_FORWARD      #enable transparent proxy support
options         IPFIREWALL_DEFAULT_TO_ACCEPT    #allow everything by default
options         DUMMYNET   #traffic shaping
options         RANDOM_IP_ID   #little more protection from hackers

Alan Glait wrote:

>Hi ! 
>I want to connect my win to my freebsd. But the nat is not working. How I check if my kernel have ipfw ? 
>Now, when I start the pc I get something "IP packet filtering enable, divert Disable, IP forwarding enable" .. What this means ?? Is it working ?? 
>
>Regards Alan
>_______________________________________________
>freebsd-net@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-net
>To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
>
>  
>