Adam Vande More writes:
> > If compiled into the kernel, there's a set of optional settings
> > (VERBOSE, LOG_LINIT, DEFAULT_TO_ACCEPT, etc) that can be set there.
> > If using the module, how does one set these?
> >
> Logging is compiled into the modules and there are a few sysctl's. AFAIK,
> everything else is the same.
>
> http://www.freebsd.org/doc/handbook/firewalls-ipfw.html
So ... double-checking I'm doing this right:
1) in /boot/loader.conf:
ipfw_load="YES"
ipdivert_load="YES"
2) in the kernel config:
#options IPFIREWALL #firewall
#options IPFIREWALL_VERBOSE #enable logging to syslogd(8)
#options IPFIREWALL_VERBOSE_LIMIT=100 #limit verbosity
#options IPFIREWALL_DEFAULT_TO_ACCEPT #allow everything by default
#options IPDIVERT
#options IPFIREWALL_NAT #ipfw kernel nat support
options LIBALIAS # required for NAT
3) in /etc/sysctl.conf:
net.inet.ip.fw.default_to_accept="1"
net.inet.ip.fw.verbose="1"
net.inet.ip.fw.verbose_limit="100"
That cover it?
Robert Huff
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[email protected]"
