From owner-freebsd-questions  Thu Dec 21  1: 5:12 2000
From owner-freebsd-questions@FreeBSD.ORG  Thu Dec 21 01:05:10 2000
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mailhost01.reflexnet.net (mailhost01.reflexnet.net [64.6.192.82])
	by hub.freebsd.org (Postfix) with ESMTP id BF9B437B400
	for <questions@freebsd.org>; Thu, 21 Dec 2000 01:05:10 -0800 (PST)
Received: from rfx-64-6-211-149.users.reflexcom.com ([64.6.211.149]) by mailhost01.reflexnet.net  with Microsoft SMTPSVC(5.5.1877.197.19);
	 Thu, 21 Dec 2000 01:03:33 -0800
Received: (from cjc@localhost)
	by rfx-64-6-211-149.users.reflexcom.com (8.11.0/8.11.0) id eBL95AQ97766;
	Thu, 21 Dec 2000 01:05:10 -0800 (PST)
	(envelope-from cjc)
Date: Thu, 21 Dec 2000 01:05:09 -0800
From: "Crist J. Clark" <cjclark@reflexnet.net>
To: Robert Myers <ccrider@whiterose.net>
Cc: brueggma@snoopie.yi.org, questions@FreeBSD.ORG
Subject: Re: ipfw/gateway
Message-ID: <20001221010509.Z96105@149.211.6.64.reflexcom.com>
Reply-To: cjclark@alum.mit.edu
References: <20001219200559.A80329@snoopie.yi.org> <000101c06ae9$c54e9680$0201a8c0@ccrider2k>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0i
In-Reply-To: <000101c06ae9$c54e9680$0201a8c0@ccrider2k>; from ccrider@whiterose.net on Wed, Dec 20, 2000 at 03:31:42PM -0500
Sender: cjc@rfx-64-6-211-149.users.reflexcom.com
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Wed, Dec 20, 2000 at 03:31:42PM -0500, Robert Myers wrote:
> Eric,
> 
> 	You will need to add IP_FORWARD in the kernel config, compile and rebuild.

I am not aware of any such option. If you mean,

  IPFIREWALL_FORWARD

This person does not need it. He does not have any 'fwd' ipfw(8)
rules.

> That option will
> 	allow you to forward packets accross the interfaces.

No, you don't need to compile in extra options for that
functionality.

>  Don't forget to
> enable all the rest of the IPFW
> 	options if you want the ability to deny traffic.....

To do NAT, these,

  options IPFIREWALL
  options IPDIVERT

Options are required. See natd(8).
-- 
Crist J. Clark                           cjclark@alum.mit.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message