Home arrow Configure arrow Kernel Configurations arrow Kernel with IPFW and Dummynet
Kernel with IPFW and Dummynet PDF
Tuesday, 05 December 2006
If you want to build a FreeBSD router based on IPFW firewall and dummynet for traffic limiting (and natd for Network Address translation) you will need these options in kernel. Copy GENERIC file to a new file, for example ROUTER (GENERIC file is located in /usr/src/sys/i386/conf) then edit and add the following options:

# --------- add this to your ROUTER kernel config file -------------
options IPDIVERT
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_FORWARD
options DUMMYNET
options HZ=1000
# ---------------------- end of ROUTER file --------------------------

Comments
HZ=1000 is used for better performance
DUMMYNET is used for Dummynet support in kernel, pipes and queues for bandwith limit.

 

Other BSD Systems

OpenBSD

Misc

Solaris

Polls

Best BSD firewall?