| |
| Thi file is for use with FreeBSD 4.x and 5.x only. |
| |
| To build a kernel for use with the loadable kernel module, follow these |
| steps: |
| 0. Run "config GENERIC" or similar in /sys/i386/conf or the |
| appropriate directory for your kernel. |
| |
| 1. For FreeBSD version: |
| 4.* do make freebsd4 |
| 5.* do make freebsd5 |
| |
| 2. do "make install-bsd" |
| (probably has to be done as root) |
| |
| 3. Run "BSD/kupgrade" |
| |
| 4. build a new kernel |
| |
| 5. install and reboot with the new kernel |
| |
| 6. use modload(8)/kldload(8) to load the packet filter with: |
| modload if_ipl.o |
| kldload ipf.ko |
| |
| 7. do "modstat" or "kldstat" to confirm that it has been loaded |
| successfully. |
| |
| There is no need to use mknod to create the device in /dev; |
| - upon loading the module, it will create itself with the correct values, |
| under the name (IPL_NAME) from the Makefile. It will also remove itself |
| from /dev when it is modunload'd. |
| |
| To build a kernel with the IP filter, follow these steps: |
| |
| 1. For FreeBSD version: |
| 4.* do make freebsd4 |
| 5.* do make freebsd5 |
| |
| 2. do "make install-bsd" |
| (probably has to be done as root) |
| |
| 3. run "FreeBSD/kinstall" as root |
| |
| 4. build a new kernel |
| |
| 5. |
| b) If you are using FreeBSD-3 or later: |
| create devices for IP Filter as follows (assuming it was |
| installed into the device table as char dev 20): |
| mknod /dev/ipl c 79 0 |
| mknod /dev/ipnat c 79 1 |
| mknod /dev/ipstate c 79 2 |
| mknod /dev/ipauth c 79 3 |
| mknod /dev/ipsync c 79 4 |
| mknod /dev/ipscan c 79 5 |
| |
| 6. install and reboot with the new kernel |
| |
| Darren Reed |
| darrenr@pobox.com |