Re: [Pcbsd-developer] PC-BSD 1.0 kernel features (drm, firewall, ....)

[Kris M. <kri...@co...>]

Andrei,

I may go ahead and roll an alternate kernel with these options, and make 
it selectable on the System Utility :) Thanks for the suggestions.



---
Kris Moore


Andrei Kolu wrote:
> I start with kernel today:)
> 
> changes in default PC-BSD kernel config /root/kernel/MYKERNEL :
> 
> machine         i386
> #cpu            I486_CPU
> #cpu            I586_CPU
> cpu             I686_CPU
> ident           PCBSD
> 
> # Direct Rendering modules for 3D acceleration.
> device          drm             # DRM core module required by DRM drivers
> device          mach64drm       # ATI Rage Pro, Rage Mobility P/M, Rage XL
> device          mgadrm          # AGP Matrox G200, G400, G450, G550
> device          r128drm         # ATI Rage 128
> device          radeondrm       # ATI Radeon
> device          sisdrm          # SiS 300/305, 540, 630
> 
> # networking
> options         HZ=1000
> options         DEVICE_POLLING # not all NICs support polling :( but releases 
> IRQs for better networking performance
> 
> # PF firewall
> device pf
> device pflog
> device pfsync
> 
> # PF ALTQ # not all NICs support ALTQ :(
> options         ALTQ
> options         ALTQ_CBQ        # Class Bases Queuing (CBQ)
> options         ALTQ_RED        # Random Early Detection (RED)
> options         ALTQ_RIO        # RED In/Out
> options         ALTQ_HFSC       # Hierarchical Packet Scheduler (HFSC)
> options         ALTQ_PRIQ       # Priority Queuing (PRIQ)
> options         ALTQ_NOPCC      # Required for SMP build
> 
> Alternative to PF is to use IPFW
> 
> options    IPFIREWALL                   
> # This option enables IPFW as part of the kernel
> options    IPFIREWALL_VERBOSE           
> # Enables logging of packets that pass through IPFW and have the 'log' keyword 
> specified in the rule set.
> options    IPFIREWALL_VERBOSE_LIMIT=5   
> # Limits the number of packets logged through syslogd(8) on a per entry basis. 
> You may wish to use this option in hostile environments which you want to log 
> firewall activity. This will close a possible denial of service attack via 
> syslog flooding.
> options    IPFIREWALL_DEFAULT_TO_ACCEPT
> options    IPDIVERT # This enables the use of NAT functionality.
> 
> 
> -------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=k&kid0709&bid&3057&dat1642
> _______________________________________________
> PCBSD-Developer mailing list
> PCB...@li...
> https://lists.sourceforge.net/lists/listinfo/pcbsd-developer
> 
>