2009/5/26 Patrick Kariuki
<patrick.kariuki@gmail.com>
Ensure the following options are set in your kernel:
IPFIREWALL
IPDIVERT
IPFIREWALL_FORWARD
IPFIREWALL_VERBOSE
also add firewall_type="OPEN" in your /etc/rc.conf
Those will force him to recompile the kernel!
he can achieve the same by simply loading the relevant modules using /boot/loader.conf:
ipfw_load=YES
ipfw_nat_load=YES