From owner-freebsd-current Fri Apr 24 00:05:36 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id AAA08849 for freebsd-current-outgoing; Fri, 24 Apr 1998 00:05:36 -0700 (PDT) (envelope-from owner-freebsd-current@FreeBSD.ORG) Received: from proxy.metro.tas.com.au ([147.109.165.35]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id AAA08816 for ; Fri, 24 Apr 1998 00:05:27 -0700 (PDT) (envelope-from kerry.morse@metro.tas.com.au) Received: from mttmail.metro.tas.com.au (MTTMail.metro.tas.com.au [147.109.164.249]) by proxy.metro.tas.com.au (8.8.8/8.8.5) with ESMTP id RAA14042 for ; Fri, 24 Apr 1998 17:24:22 +1000 (EST) Received: by MTTMail.metro.tas.gov.au with Internet Mail Service (5.0.1458.49) id ; Fri, 24 Apr 1998 17:05:22 +1000 Message-ID: <02B01380C828D1119ED70020AF641C53084B84@MTTMail.metro.tas.gov.au> From: Kerry Morse To: "'freebsd-current@FreeBSD.ORG'" Subject: RE: Firewall with Freebsd Date: Fri, 24 Apr 1998 17:05:19 +1000 X-Priority: 3 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.0.1458.49) Content-Type: text/plain Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I want make a firewall with FreeBSD. For more efficacity and controlling access, I want enable logging rules.For make this FIREWALL_VERBOSE must be enabled in kernel. How make for enable this parameter ? (If kernel must be recompiled how make ?) You need the source code to the kernel, you then need to go to the /sys/i386/conf directory and modify the GENERIC file to additionally include the following lines: options IPFIREWALL options IPFIREWALL_VERBOSE then you need to type: config GENERIC cd ../../compile/GENERIC make depend make make install you now have a new kernel with the firewall options, you need to then setup the firewall options within rc.conf and rc.firewall.. finally reboot the machine and try it... p.s. changing firewall settings can cause a lot of hiccups so be close to the console when setting this up, also have a good read of the ipfw command... To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message