Re: IPFirewall.ktext HELP
Re: IPFirewall.ktext HELP
- Subject: Re: IPFirewall.ktext HELP
- From: "Justin C. Walker" <email@hidden>
- Date: Tue, 9 Jul 2002 11:03:34 -0700
On Tuesday, July 9, 2002, at 10:09 AM, Joshua Graessley wrote:
Some of these options may require that the kernel be recompiled as
well. For example, dummynet support requires changes to the kernel as
well as the IPFirewall kext.
Thanks for pointing that out; I should have been more explicit: the
support for dummynet and bridge is not implemented in the Darwin kernel,
so turning those on will get you into trouble, as will the netgraph
defines. The others (IPFIREWALL*, IPDIVERT), I think, are all enabled
by default.
Regards
Justin
On Tuesday, July 9, 2002, at 12:16 AM, Justin C. Walker wrote:
On Monday, July 8, 2002, at 08:23 PM, Alberto wrote:
Please,
I have to do some changes in IPFW and for others UNIXs I should
recompile my
kernel and add:
options NETGRAPH
options NETGRAPH_PPPOE
options NETGRAPH_SOCKET
options NETGRAPH_IFACE
options IPFIREWALL
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPFIREWALL_VERBOSE
options IPFIREWALL_FORWARD
options IPDIVERT
options BRIDGE
options DUMMYNET
What exactly I need to do?
You need to check out the NKE from the repository, make your changes,
recompile, unload the current firewall NKE, and load your version.
If you want Classic to run as well, you should unload the SharedIP
extension after unloading the firewall, and then reload SharedIP
before loading the firewall. If you make significant changes you may
end up breaking Classic support in some way.
Regards,
Justin
PS: you don't have netgraph in Darwin, and you don't need to worry
about 'options' when building the NKE.
--
Justin C. Walker, Curmudgeon-At-Large *
Institute for General Semantics | When LuteFisk is outlawed
| Only outlaws will have
| LuteFisk
*--------------------------------------
*-------------------------------*
_______________________________________________
darwin-kernel mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/darwin-kernel
Do not post admin requests to the list. They will be ignored.
_______________________________________________
darwin-kernel mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/darwin-kernel
Do not post admin requests to the list. They will be ignored.
--
Justin C. Walker, Curmudgeon-At-Large *
Institute for General Semantics | Men are from Earth.
| Women are from Earth.
| Deal with it.
*--------------------------------------*-------------------------------*
_______________________________________________
darwin-kernel mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/darwin-kernel
Do not post admin requests to the list. They will be ignored.