From owner-freebsd-questions Wed Jan 16 21:27:10 2002 Delivered-To: freebsd-questions@freebsd.org Received: from dc-mx04.cluster1.charter.net (dc-mx04.cluster0.hsacorp.net [209.225.8.14]) by hub.freebsd.org (Postfix) with ESMTP id D782537B400 for ; Wed, 16 Jan 2002 21:27:07 -0800 (PST) Received: from [24.158.214.244] (HELO gforce.johnson.home) by dc-mx04.cluster1.charter.net (CommuniGate Pro SMTP 3.4.6) with ESMTP id 12550009; Thu, 17 Jan 2002 00:33:31 -0500 Received: (from glenn@localhost) by gforce.johnson.home (8.11.6/8.11.6) id g0H5R1B38573; Wed, 16 Jan 2002 23:27:01 -0600 (CST) (envelope-from glenn) From: Glenn Johnson Date: Wed, 16 Jan 2002 23:27:01 -0600 To: Mike Meyer Cc: Michael Kreykenbohm , questions@FreeBSD.ORG Subject: Re: pre-built firewall kernel Message-ID: <20020117052701.GA27499@gforce.johnson.home> Mail-Followup-To: glenn@FreeBSD.ORG, Mike Meyer , Michael Kreykenbohm , questions@FreeBSD.ORG References: <24224321@toto.iv> <15402.41015.825926.250358@guru.mired.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <15402.41015.825926.250358@guru.mired.org> User-Agent: Mutt/1.3.25i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, Dec 26, 2001 at 10:14:47PM -0600, Mike Meyer wrote: > Unlike Linux, FreeBSD isn't fragmented into a countably infinite > number of "distributions". There's really just the one. > > However, you don't need to recompile the kernel to get a firewall on > recent releases of FreeBSD. The ipfw firewall module can be loaded > into generic, and works just fine. But not if you also want to do nat. For that you must have a kernel compiled with the firewall flags and divert sockets. -- Glenn Johnson glennpj@charter.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message