On Tuesday, July 9, 2002, at 10:09 AM, Joshua Graessley wrote: Some of these options may require that the kernel be recompiled as well. For example, dummynet support requires changes to the kernel as well as the IPFirewall kext. Thanks for pointing that out; I should have been more explicit: the support for dummynet and bridge is not implemented in the Darwin kernel, so turning those on will get you into trouble, as will the netgraph defines. The others (IPFIREWALL*, IPDIVERT), I think, are all enabled by default. Regards Justin On Tuesday, July 9, 2002, at 12:16 AM, Justin C. Walker wrote: On Monday, July 8, 2002, at 08:23 PM, Alberto wrote: Please, I have to do some changes in IPFW and for others UNIXs I should recompile my kernel and add: options NETGRAPH options NETGRAPH_PPPOE options NETGRAPH_SOCKET options NETGRAPH_IFACE options IPFIREWALL options IPFIREWALL_DEFAULT_TO_ACCEPT options IPFIREWALL_VERBOSE options IPFIREWALL_FORWARD options IPDIVERT options BRIDGE options DUMMYNET What exactly I need to do? You need to check out the NKE from the repository, make your changes, recompile, unload the current firewall NKE, and load your version. If you want Classic to run as well, you should unload the SharedIP extension after unloading the firewall, and then reload SharedIP before loading the firewall. If you make significant changes you may end up breaking Classic support in some way. Regards, Justin PS: you don't have netgraph in Darwin, and you don't need to worry about 'options' when building the NKE. -- Justin C. Walker, Curmudgeon-At-Large * Institute for General Semantics | When LuteFisk is outlawed | Only outlaws will have | LuteFisk *-------------------------------------- *-------------------------------* _______________________________________________ darwin-kernel mailing list | darwin-kernel@lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored. _______________________________________________ darwin-kernel mailing list | darwin-kernel@lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored. -- Justin C. Walker, Curmudgeon-At-Large * Institute for General Semantics | Men are from Earth. | Women are from Earth. | Deal with it. *--------------------------------------*-------------------------------* _______________________________________________ darwin-kernel mailing list | darwin-kernel@lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.