[Pcbsd-developer] PC-BSD 1.0 kernel features (drm, firewall, ....)

[Andrei K. <an...@bs...>]

I start with kernel today:)

changes in default PC-BSD kernel config /root/kernel/MYKERNEL :

machine         i386
#cpu            I486_CPU
#cpu            I586_CPU
cpu             I686_CPU
ident           PCBSD

# Direct Rendering modules for 3D acceleration.
device          drm             # DRM core module required by DRM drivers
device          mach64drm       # ATI Rage Pro, Rage Mobility P/M, Rage XL
device          mgadrm          # AGP Matrox G200, G400, G450, G550
device          r128drm         # ATI Rage 128
device          radeondrm       # ATI Radeon
device          sisdrm          # SiS 300/305, 540, 630

# networking
options         HZ=1000
options         DEVICE_POLLING # not all NICs support polling :( but releases 
IRQs for better networking performance

# PF firewall
device pf
device pflog
device pfsync

# PF ALTQ # not all NICs support ALTQ :(
options         ALTQ
options         ALTQ_CBQ        # Class Bases Queuing (CBQ)
options         ALTQ_RED        # Random Early Detection (RED)
options         ALTQ_RIO        # RED In/Out
options         ALTQ_HFSC       # Hierarchical Packet Scheduler (HFSC)
options         ALTQ_PRIQ       # Priority Queuing (PRIQ)
options         ALTQ_NOPCC      # Required for SMP build

Alternative to PF is to use IPFW

options    IPFIREWALL                   
# This option enables IPFW as part of the kernel
options    IPFIREWALL_VERBOSE           
# Enables logging of packets that pass through IPFW and have the 'log' keyword 
specified in the rule set.
options    IPFIREWALL_VERBOSE_LIMIT=5   
# Limits the number of packets logged through syslogd(8) on a per entry basis. 
You may wish to use this option in hostile environments which you want to log 
firewall activity. This will close a possible denial of service attack via 
syslog flooding.
options    IPFIREWALL_DEFAULT_TO_ACCEPT
options    IPDIVERT # This enables the use of NAT functionality.