2 To build a kernel for use with the loadable kernel module, follow these
4 1. In /sys/i386/conf, create a new kernel config file (to be used
5 with IPFILTER), i.e. FIREWALL and run config, i.e. "config FIREWALL"
7 2. build the object files, telling it the name of the kernel to be
8 used. "freebsd22" MUST be the target, so the command would be
9 something like this: "make freebsd22 IPFILKERN=FIREWALL"
11 3. do "make install-bsd"
12 (probably has to be done as root)
14 4. run "FreeBSD-2.2/minstall" as root
18 6. install and reboot with the new kernel
20 7. use modload(8) to load the packet filter with:
23 8. do "modstat" to confirm that it has been loaded successfully.
25 There is no need to use mknod to create the device in /dev;
26 - upon loading the module, it will create itself with the correct values,
27 under the name (IPL_NAME) from the Makefile. It will also remove itself
28 from /dev when it is modunload'd.
30 To build a kernel with the IP filter, follow these steps:
32 *** KERNEL INSTALL CURRENTLY UNSUPPORTED ***
33 1. do "make freebsd22"
35 2. do "make install-bsd"
36 (probably has to be done as root)
38 3. run "FreeBSD-2.2/kinstall" as root
42 5a) For FreeBSD 2.2 (or later)
43 create devices for IP Filter as follows:
45 mknod /dev/ipnat c 79 1
46 mknod /dev/ipstate c 79 2
47 mknod /dev/ipauth c 79 3
49 5b) For versions prior to FreeBSD 2.2:
50 create devices for IP Filter as follows (assuming it was
51 installed into the device table as char dev 20):
53 mknod /dev/ipnat c 20 1
54 mknod /dev/ipstate c 20 2
55 mknod /dev/ipauth c 20 3
57 6. install and reboot with the new kernel