Re: IPFirewall.ktext HELP
Re: IPFirewall.ktext HELP
- Subject: Re: IPFirewall.ktext HELP
- From: Joshua Graessley <email@hidden>
- Date: Tue, 9 Jul 2002 10:09:18 -0700
Some of these options may require that the kernel be recompiled as
well. For example, dummynet support requires changes to the kernel as
well as the IPFirewall kext.
-josh
On Tuesday, July 9, 2002, at 12:16 AM, Justin C. Walker wrote:
On Monday, July 8, 2002, at 08:23 PM, Alberto wrote:
Please,
I have to do some changes in IPFW and for others UNIXs I should
recompile my
kernel and add:
options NETGRAPH
options NETGRAPH_PPPOE
options NETGRAPH_SOCKET
options NETGRAPH_IFACE
options IPFIREWALL
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPFIREWALL_VERBOSE
options IPFIREWALL_FORWARD
options IPDIVERT
options BRIDGE
options DUMMYNET
What exactly I need to do?
You need to check out the NKE from the repository, make your changes,
recompile, unload the current firewall NKE, and load your version.
If you want Classic to run as well, you should unload the SharedIP
extension after unloading the firewall, and then reload SharedIP
before loading the firewall. If you make significant changes you may
end up breaking Classic support in some way.
Regards,
Justin
PS: you don't have netgraph in Darwin, and you don't need to worry
about 'options' when building the NKE.
--
Justin C. Walker, Curmudgeon-At-Large *
Institute for General Semantics | When LuteFisk is outlawed
| Only outlaws will have
| LuteFisk
*--------------------------------------
*-------------------------------*
_______________________________________________
darwin-kernel mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/darwin-kernel
Do not post admin requests to the list. They will be ignored.
_______________________________________________
darwin-kernel mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/darwin-kernel
Do not post admin requests to the list. They will be ignored.