| NOTES (126742) | NOTES (126756) |
|---|---|
| 1# $FreeBSD: head/sys/conf/NOTES 126742 2004-03-08 10:54:35Z benno $ | 1# $FreeBSD: head/sys/conf/NOTES 126756 2004-03-08 22:03:29Z mlaier $ |
| 2# 3# NOTES -- Lines that can be cut/pasted into kernel and hints configs. 4# 5# Lines that begin with 'device', 'options', 'machine', 'ident', 'maxusers', 6# 'makeoptions', 'hints', etc. go into the kernel configuration that you 7# run config(8) with. 8# 9# Lines that begin with 'hint.' are NOT for config(8), they go into your --- 472 unchanged lines hidden (view full) --- 482# The XBONEHACK option allows the same pair of addresses to be configured on 483# multiple gif interfaces. 484# The `faith' device captures packets sent to it and diverts them 485# to the IPv4/IPv6 translation daemon. 486# The `stf' device implements 6to4 encapsulation. 487# The `ef' device provides support for multiple ethernet frame types 488# specified via ETHER_* options. See ef(4) for details. 489# | 2# 3# NOTES -- Lines that can be cut/pasted into kernel and hints configs. 4# 5# Lines that begin with 'device', 'options', 'machine', 'ident', 'maxusers', 6# 'makeoptions', 'hints', etc. go into the kernel configuration that you 7# run config(8) with. 8# 9# Lines that begin with 'hint.' are NOT for config(8), they go into your --- 472 unchanged lines hidden (view full) --- 482# The XBONEHACK option allows the same pair of addresses to be configured on 483# multiple gif interfaces. 484# The `faith' device captures packets sent to it and diverts them 485# to the IPv4/IPv6 translation daemon. 486# The `stf' device implements 6to4 encapsulation. 487# The `ef' device provides support for multiple ethernet frame types 488# specified via ETHER_* options. See ef(4) for details. 489# |
| 490# The pf packet filter consists of three devices: 491# The `pf' device provides /dev/pf and the firewall code itself. 492# The `pflog' device provides the pflog0 interface which logs packets. 493# The `pfsync' device provides the pfsync0 interface used for 494# synchronization of firewall state tables (over the net). 495# Requires option PFIL_HOOKS and (when used as a module) option RANDOM_IP_ID 496# |
|
| 490# The PPP_BSDCOMP option enables support for compress(1) style entire 491# packet compression, the PPP_DEFLATE is for zlib/gzip style compression. 492# PPP_FILTER enables code for filtering the ppp data stream and selecting 493# events for resetting the demand dial activity timer - requires bpf. 494# See pppd(8) for more details. 495# 496device ether #Generic Ethernet 497device vlan #VLAN support --- 4 unchanged lines hidden (view full) --- 502device sppp #Generic Synchronous PPP 503device loop #Network loopback device 504device bpf #Berkeley packet filter 505device disc #Discard device (ds0, ds1, etc) 506device tap #Virtual Ethernet driver 507device tun #Tunnel driver (ppp(8), nos-tun(8)) 508device sl #Serial Line IP 509device gre #IP over IP tunneling | 497# The PPP_BSDCOMP option enables support for compress(1) style entire 498# packet compression, the PPP_DEFLATE is for zlib/gzip style compression. 499# PPP_FILTER enables code for filtering the ppp data stream and selecting 500# events for resetting the demand dial activity timer - requires bpf. 501# See pppd(8) for more details. 502# 503device ether #Generic Ethernet 504device vlan #VLAN support --- 4 unchanged lines hidden (view full) --- 509device sppp #Generic Synchronous PPP 510device loop #Network loopback device 511device bpf #Berkeley packet filter 512device disc #Discard device (ds0, ds1, etc) 513device tap #Virtual Ethernet driver 514device tun #Tunnel driver (ppp(8), nos-tun(8)) 515device sl #Serial Line IP 516device gre #IP over IP tunneling |
| 517device pf #PF OpenBSD packet-filter firewall 518device pflog #logging support interface for PF 519device pfsync #synchronization interface for PF |
|
| 510device ppp #Point-to-point protocol 511options PPP_BSDCOMP #PPP BSD-compress support 512options PPP_DEFLATE #PPP zlib/deflate/gzip support 513options PPP_FILTER #enable bpf filtering (needs bpf) 514 515device ef # Multiple ethernet frames support 516options ETHER_II # enable Ethernet_II frame 517options ETHER_8023 # enable Ethernet_802.3 (Novell) frame --- 38 unchanged lines hidden (view full) --- 556# IPDIVERT enables the divert IP sockets, used by ``ipfw divert'' 557# 558# IPSTEALTH enables code to support stealth forwarding (i.e., forwarding 559# packets without touching the ttl). This can be useful to hide firewalls 560# from traceroute and similar tools. 561# 562# PFIL_HOOKS enables an abtraction layer which is meant to be used in 563# network code where filtering is required. See the pfil(9) man page. | 520device ppp #Point-to-point protocol 521options PPP_BSDCOMP #PPP BSD-compress support 522options PPP_DEFLATE #PPP zlib/deflate/gzip support 523options PPP_FILTER #enable bpf filtering (needs bpf) 524 525device ef # Multiple ethernet frames support 526options ETHER_II # enable Ethernet_II frame 527options ETHER_8023 # enable Ethernet_802.3 (Novell) frame --- 38 unchanged lines hidden (view full) --- 566# IPDIVERT enables the divert IP sockets, used by ``ipfw divert'' 567# 568# IPSTEALTH enables code to support stealth forwarding (i.e., forwarding 569# packets without touching the ttl). This can be useful to hide firewalls 570# from traceroute and similar tools. 571# 572# PFIL_HOOKS enables an abtraction layer which is meant to be used in 573# network code where filtering is required. See the pfil(9) man page. |
| 564# This option is required by the IPFILTER option. | 574# This option is required by the IPFILTER option and the PF device. |
| 565# 566# TCPDEBUG enables code which keeps traces of the TCP state machine 567# for sockets with the SO_DEBUG option set, which can then be examined 568# using the trpt(8) utility. 569# 570options MROUTING # Multicast routing 571options PIM # Protocol Independent Multicast 572options IPFIREWALL #firewall --- 1824 unchanged lines hidden --- | 575# 576# TCPDEBUG enables code which keeps traces of the TCP state machine 577# for sockets with the SO_DEBUG option set, which can then be examined 578# using the trpt(8) utility. 579# 580options MROUTING # Multicast routing 581options PIM # Protocol Independent Multicast 582options IPFIREWALL #firewall --- 1824 unchanged lines hidden --- |