In the kernel configuration add: options IPFIREWALL # firewall options IPFIREWALL_VERBOSE # enable logging to syslogd (8) options IPFIREWALL_DEFAULT_TO_ACCEPT # allow everything by default options IPDIVERT options IPFIREWALL_FORWARD