From owner-freebsd-questions@FreeBSD.ORG Tue Sep 23 16:20:20 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8C67F10656A5 for ; Tue, 23 Sep 2008 16:20:20 +0000 (UTC) (envelope-from nino80@gmail.com) Received: from wx-out-0506.google.com (wx-out-0506.google.com [66.249.82.229]) by mx1.freebsd.org (Postfix) with ESMTP id 49E228FC1A for ; Tue, 23 Sep 2008 16:20:19 +0000 (UTC) (envelope-from nino80@gmail.com) Received: by wx-out-0506.google.com with SMTP id s17so533503wxc.7 for ; Tue, 23 Sep 2008 09:20:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:mime-version:content-type:content-transfer-encoding :content-disposition; bh=4MzDEUshxlDrTP4pwRRESbJIJY5e0O4RkGZMJXETSms=; b=K4ss2xpDALGHpfeYouHXg5a2b40VTrE/iPK8al30ls8Lr5jpG6z+TBrQjY/3aip9BI n27ZYRXtFd5llB4+2e7hwH1YLZJ6u43aCzy34sf7TQazbrZ0dvDJgrUl1qYND8ixUajV aEOc2yC/GqhAvdqA8fBz7tk2E6TLRbBaeuDtY= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:mime-version:content-type :content-transfer-encoding:content-disposition; b=wqSUcczQNnBpdl9TGmKPOjKRgOAMJTM2Ewm3CLY/hZxsUSyY7ERKUFbo7ntBDXTXI7 i3gNlI6M2SQCj3Jk/4IVu/I1A8Y2NBrxLlFdp6RVUdkKANxVY7l2669j+I5WEJu0DN/8 a7ymFe9RKusVYfj001vuWprtT5uGyioVRbcqo= Received: by 10.151.114.6 with SMTP id r6mr9367528ybm.208.1222185489686; Tue, 23 Sep 2008 08:58:09 -0700 (PDT) Received: by 10.150.149.12 with HTTP; Tue, 23 Sep 2008 08:58:09 -0700 (PDT) Message-ID: <92bcbda50809230858j2dc39695x3135291bb2a3ddc7@mail.gmail.com> Date: Tue, 23 Sep 2008 17:58:09 +0200 From: "n j" To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Subject: Recompile kernel or module for ipfw+nat? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Sep 2008 16:20:20 -0000 Hello everyone, I have a quick question regarding the setup of nat with ipfw. According to the handbook: "The following options must be in the kernel configuration file: options IPFIREWALL options IPDIVERT" however, there is a kernel module called ipdivert.ko similar to ipfw.ko for the firewall. Is it still necessary to recompile the kernel in order to use nat with ipfw? Or, to put it another way, is there a possibility to use nat and keep the generic kernel? Thanks for any input, -- Nino