d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add ability to automatically load ipfw_nat64, ipfw_nptv6 and ipfw_pmod

Browse Source 
modules by declaring corresponding variables in rc.conf. Also document
them in rc.conf(5).

Submitted by:	Dries Michiels
Differential Revision:	https://reviews.freebsd.org/D19673
This commit is contained in:
Andrey V. Elsukov 2019-03-23 15:41:32 +00:00
parent 94e9dcf224
commit 0bd4858ed3
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=345450
2 changed files with 44 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
libexec/rc/rc.d/ipfw
View File

@ -34,6 +34,15 @@ ipfw_prestart()
if checkyesno firewall_nat_enable; then
required_modules="$required_modules ipfw_nat"
fi
if checkyesno firewall_nat64_enable; then
required_modules="$required_modules ipfw_nat64"
fi
if checkyesno firewall_nptv6_enable; then
required_modules="$required_modules ipfw_nptv6"
fi
if checkyesno firewall_pmod_enable; then
required_modules="$required_modules ipfw_pmod"
fi
}
ipfw_start()

38
share/man/man5/rc.conf.5
View File

@ -24,7 +24,7 @@
.\"
.\" $FreeBSD$
.\"
.Dd December 19, 2018
.Dd March 21, 2019
.Dt RC.CONF 5
.Os
.Sh NAME
@ -573,9 +573,11 @@ equivalent of
.Va natd_enable .
Setting this to
.Dq Li YES
enables kernel NAT.
will automatically load the
.Xr ipfw 8
NAT kernel module if
.Va firewall_enable
must also be set to
is also set to
.Dq Li YES .
.It Va firewall_nat_interface
.Pq Vt str
@ -588,6 +590,36 @@ kernel NAT should run.
.It Va firewall_nat_flags
.Pq Vt str
Additional configuration parameters for kernel NAT should be placed here.
.It Va firewall_nat64_enable
.Pq Vt bool
Setting this to
.Dq Li YES
will automatically load the
.Xr ipfw 8
NAT64 kernel module if
.Va firewall_enable
is also set to
.Dq Li YES .
.It Va firewall_nptv6_enable
.Pq Vt bool
Setting this to
.Dq Li YES
will automatically load the
.Xr ipfw 8
NPTv6 kernel module if
.Va firewall_enable
is also set to
.Dq Li YES .
.It Va firewall_pmod_enable
.Pq Vt bool
Setting this to
.Dq Li YES
will automatically load the
.Xr ipfw 8
pmod kernel module if
.Va firewall_enable
is also set to
.Dq Li YES .
.It Va dummynet_enable
.Pq Vt bool
Setting this to