Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 7 Apr 2010 22:52:43 -0500
From:      Adam Vande More <amvandemore@gmail.com>
To:        Gary Dunn <osp@aloha.com>
Cc:        freebsd-questions <freebsd-questions@freebsd.org>
Subject:   Re: Kernel Config for NAT
Message-ID:  <x2m6201873e1004072052u88a62b4eo7d1e9a457240937a@mail.gmail.com>
In-Reply-To: <201004080252.o382qFH7019790@leka.aloha.com>
References:  <201004080252.o382qFH7019790@leka.aloha.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Apr 7, 2010 at 9:51 PM, Gary Dunn <osp@aloha.com> wrote:

> I am setting up a router to share one Wi-Fi link between a few computers
> that only support CAT-5. Like a wireless access point except wired and
> wireless sides are reversed. My question is about the ipfw packet filter.
> >From the handbook section on NAT, 31.9.3, I can achieve what I need with
> boot loader options. Section 31.9.4 describes alternatives for building a
> custom kernel. In contrast, the chapter on ipfw states several times that
> NAT requires a custom kernel - 30.6.1, 30.6.2, 30.6.5.7.
>
> I want to use freebsd-update and building a custom kernel eliminates that
> option.
>
> Which is correct? Do I need to build a custom kernel to use NAT?
>

You don't need to do build a custom kernel anymore, that's a relatively
recent change.  Another option is to use pf instead ipfw since it has
built-in NAT.  I'm not saying you should change as your current path has
worked great for me for many years.

-- 
Adam Vande More



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?x2m6201873e1004072052u88a62b4eo7d1e9a457240937a>