freebsd-kernel.conf

#

include		GENERIC
ident		superserver

nomakeoptions	DEBUG

nodevice	fdc

nodevice	cbb		# cardbus (yenta) bridge
nodevice	pccard		# PC Card (16-bit) bus
nodevice	cardbus		# CardBus (32-bit) bus


##################################################################### 18%
# NETWORKING OPTIONS
options		IPSEC			#IP security (requires device crypto)
options		IPSEC_FILTERTUNNEL	#filter ipsec packets from a tunnel
options		IPSEC_NAT_T		#NAT-T support, UDP encap of ESP


# libalias library, performing NAT
options		LIBALIAS

options		NETGRAPH		# netgraph(4) system

# IPsec interface.
device		enc


options		MROUTING		# Multicast routing
options         IPFIREWALL		#firewall
options         IPFIREWALL_VERBOSE	#enable logging to syslogd(8)
options         IPFIREWALL_VERBOSE_LIMIT=100	#limit verbosity
options         IPFIREWALL_DEFAULT_TO_ACCEPT	#allow everything by default
options         IPFIREWALL_NAT		#ipfw kernel nat support
options         IPDIVERT		#divert sockets
#options	IPFILTER		#ipfilter support
#options	IPFILTER_LOG		#ipfilter logging
#options	IPFILTER_LOOKUP		#ipfilter pools
#options	IPFILTER_DEFAULT_BLOCK	#block all packets by default
options		IPSTEALTH		#support for stealth forwarding
#options	TCPDEBUG

options		DUMMYNET

##################################################################### 95%
# crypto subsystem
device		crypto		# core crypto support
device		cryptodev	# /dev/crypto for access to h/w