These patches are not actively maintained. They worked when I wrote them. Changes to FreeBSD may have been made since which cause them to not apply cleanly or even break things. If you do encounter problems, feel free to contact me, email@example.com, and I may be able to help. I will at least remove the patch or add appropriate warnings to this page.
To use a patch,
# cd /usr/src
# patch < patchfile
# sysctl net.link.ether.bridge_ipf=1IPFilter bridging support is included in 5-CURRENT and 4-STABLE. For 4.6-RELEASE and before, this patch must be applied to the kernel source. In 4-STABLE, IPFilter bridging does work as a kld(4), part of bridge.ko.
# sysctl -w net.inet.ip.fw.verbose=2Will print information about the IP layer. When the 4-bit of net.inet.ip.fw.verbose is set, additional information on TCP segments will be printed, the TCP flags (f), sequence number (s), and aknowledgement number (a). IPFIREWALL_VERBOSE and obviously, IPFIREWALL must be enabled in your kernel configuration for these to work. Patches for 5.0-CURRENT and 4.4-STABLE. Rebuild and install the new kernel after applying the changes.