Linux/UNIX
butonel: Liviu | februarie 14th, 2015
0FREEBSD – KERNEL recompile add IPFW support
#cd /usr/src/sys/amd64/conf/
#cp GENERIC TTNIPFWKERNEL
edit:
# /usr/src/sys/amd64/conf/TTNIPFWKERNEL
add:
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=10
options IPDIVERT # required for natd
options RACCT
options RCTL
###Racct = limit jails resources, – REMINDER!
# cd /usr/src
# make buildkernel KERNCONF=TTNIPFWKERNEL
# make installkernel KERNCONF=TTNIPFWKERNEL
REMINDER: DONT REBOOT; EDIT /rc.conf for firewall – DEFAULT POLICY DROPS;