Skip to content

Instantly share code, notes, and snippets.

@amatsumara
Created October 8, 2017 10:57
Show Gist options
  • Save amatsumara/583f98b4ecd065aad801bad9b28bce6d to your computer and use it in GitHub Desktop.
Save amatsumara/583f98b4ecd065aad801bad9b28bce6d to your computer and use it in GitHub Desktop.
#
include GENERIC
ident superserver
nomakeoptions DEBUG
nodevice fdc
nodevice cbb # cardbus (yenta) bridge
nodevice pccard # PC Card (16-bit) bus
nodevice cardbus # CardBus (32-bit) bus
##################################################################### 18%
# NETWORKING OPTIONS
options IPSEC #IP security (requires device crypto)
options IPSEC_FILTERTUNNEL #filter ipsec packets from a tunnel
options IPSEC_NAT_T #NAT-T support, UDP encap of ESP
# libalias library, performing NAT
options LIBALIAS
options NETGRAPH # netgraph(4) system
# IPsec interface.
device enc
options MROUTING # Multicast routing
options IPFIREWALL #firewall
options IPFIREWALL_VERBOSE #enable logging to syslogd(8)
options IPFIREWALL_VERBOSE_LIMIT=100 #limit verbosity
options IPFIREWALL_DEFAULT_TO_ACCEPT #allow everything by default
options IPFIREWALL_NAT #ipfw kernel nat support
options IPDIVERT #divert sockets
#options IPFILTER #ipfilter support
#options IPFILTER_LOG #ipfilter logging
#options IPFILTER_LOOKUP #ipfilter pools
#options IPFILTER_DEFAULT_BLOCK #block all packets by default
options IPSTEALTH #support for stealth forwarding
#options TCPDEBUG
options DUMMYNET
##################################################################### 95%
# crypto subsystem
device crypto # core crypto support
device cryptodev # /dev/crypto for access to h/w
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment