Home arrow Configure arrow Kernel Configurations arrow Kernel with IPFW and Dummynet
Kernel with IPFW and Dummynet PDF  
Digg Reddit Ma.gnolia Stumble Upon Facebook Twitter Google Yahoo! MyWeb Furl" BlinkList Technorati Mixx Bookmark
If you want to build a FreeBSD router based on IPFW firewall and dummynet for traffic limiting (and natd for Network Address translation) you will need these options in kernel. Copy GENERIC file to a new file, for example ROUTER (GENERIC file is located in /usr/src/sys/i386/conf) then edit and add the following options:

# --------- add this to your ROUTER kernel config file -------------
options IPDIVERT
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_FORWARD
options DUMMYNET
options HZ=1000
# ---------------------- end of ROUTER file --------------------------

Comments
HZ=1000 is used for better performance
DUMMYNET is used for Dummynet support in kernel, pipes and queues for bandwith limit.