Compiling kernel - optimise as router?

[Algemon]

During the config process when compiling the 2.4.0 kernel, there is a question about whether the machine will be functioning primarily as a router. I am not certian what is the best answer here for me.

I am planning for this machine to be the main machine I will use and it will be running a firewall. I also plan to connect a windoz machine to it (using it as the gateway to the internet and as firewall.) That is it. No large network of computers.

Now back to the question about it being a router. Do I still need to answer yes to this question, or can I just use the iptables stuff to do NAT for the windoz machine?

[Craig McPherson]

Optimize just means "make faster". You can do the same thing with your machine no matter what you say here. Saying yes will just (in theory) speed up the process of routing packets at the expense of slowing down other networking activities on the machine.

Passing packets back and forth between two interfaces, optinally with masq/NAT, IS routing, albeit a very simple form of it. If that's all your box does, you can try saying YES there and see how well it works.

Still, certain kernel options can have unforseen consequences that aren't really explained in the kernel documentation (like how turning on QoS routing in the kernel can cause your router to favor Windows clients over UNIX clients because of Windows's broken network code), so when in doubt, stick with the default option, whatever it is. Also, always read the "help" option in the kernel configuration for options you have questions about, and it'll tell you at least a little bit, as long with a suggested default setting.