FreeBSD firewall, nat, kernel

2006-06-13 Thread regi
Hi, I've just installed a FBSD 6.1 box and I want to install Firewall and NAT services. The handbook Firewall chapter indicates to compile Firewall if you want NAT. But, I could not find in the GENERIC file the IPFIREWALL options. Do you have an idea ? Thanks, Regi

Re: FreeBSD firewall, nat, kernel

2006-06-13 Thread Erik Norgaard
[EMAIL PROTECTED] wrote: Hi, I've just installed a FBSD 6.1 box and I want to install Firewall and NAT services. The handbook Firewall chapter indicates to compile Firewall if you want NAT. But, I could not find in the GENERIC file the IPFIREWALL options. Do you have an idea ? See the NOTES

RE: FreeBSD firewall, nat, kernel

2006-06-13 Thread fbsd
PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: Tuesday, June 13, 2006 9:35 AM To: [EMAIL PROTECTED] Subject: FreeBSD firewall, nat, kernel Hi, I've just installed a FBSD 6.1 box and I want to install Firewall and NAT services. The handbook Firewall chapter indicates to compile Firewall if you want

Re: FreeBSD firewall, nat, kernel

2006-06-13 Thread David Stanford
:35 AM To: [EMAIL PROTECTED] Subject: FreeBSD firewall, nat, kernel Hi, I've just installed a FBSD 6.1 box and I want to install Firewall and NAT services. The handbook Firewall chapter indicates to compile Firewall if you want NAT. But, I could not find in the GENERIC file the IPFIREWALL options

Re: FreeBSD firewall, nat, kernel

2006-06-13 Thread Dennis Olvany
From a fresh install, a working nat should only require a few commands. Kernel compilation is not necessary. kldload ipfw kldload ipdivert sysctl net.inet.ip.forwarding=1 dhclient xl0 natd -dynamic -n xl0 ipfw add divert natd ip from any to any via xl0 ipfw add allow ip from any to any ifconfig

Re: FreeBSD firewall, nat, kernel

2006-06-13 Thread David Stanford
On 6/14/06, Dennis Olvany [EMAIL PROTECTED] wrote: From a fresh install, a working nat should only require a few commands. Kernel compilation is not necessary. I personally don't use the NAT function in my IPFW config, and thus just reverted to the handbook,,,*cough*, excuse me...bible for