4 To build a kernel for use with the loadable kernel module, follow these
6 1. In /sys/i386/conf, create a new kernel config file (to be used
7 with IPFILTER), i.e. FIREWALL and run config, i.e. "config FIREWALL"
9 2. build the object files, telling it the name of the kernel to be
10 used. "freebsd22" MUST be the target, so the command would be
11 something like this: "make freebsd22 IPFILKERN=FIREWALL"
13 3. do "make install-bsd"
14 (probably has to be done as root)
16 4. run "FreeBSD-2.2/minstall" as root
20 6. install and reboot with the new kernel
22 7. use modload(8) to load the packet filter with:
25 8. do "modstat" to confirm that it has been loaded successfully.
27 There is no need to use mknod to create the device in /dev;
28 - upon loading the module, it will create itself with the correct values,
29 under the name (IPL_NAME) from the Makefile. It will also remove itself
30 from /dev when it is modunload'd.
32 To build a kernel with the IP filter, follow these steps:
34 *** KERNEL INSTALL CURRENTLY UNSUPPORTED ***
35 1. do "make freebsd22"
37 2. do "make install-bsd"
38 (probably has to be done as root)
40 3. run "FreeBSD-2.2/kinstall" as root
44 5a) For FreeBSD 2.2 (or later)
45 create devices for IP Filter as follows:
47 mknod /dev/ipnat c 79 1
48 mknod /dev/ipstate c 79 2
49 mknod /dev/ipauth c 79 3
51 5b) For versions prior to FreeBSD 2.2:
52 create devices for IP Filter as follows (assuming it was
53 installed into the device table as char dev 20):
55 mknod /dev/ipnat c 20 1
56 mknod /dev/ipstate c 20 2
57 mknod /dev/ipauth c 20 3
59 6. install and reboot with the new kernel