From owner-freebsd-questions Wed Oct 25 3:39: 2 2000 Delivered-To: freebsd-questions@freebsd.org Received: from maild.telia.com (maild.telia.com [194.22.190.3]) by hub.freebsd.org (Postfix) with ESMTP id 9A83437B479 for ; Wed, 25 Oct 2000 03:38:56 -0700 (PDT) Received: from ents02 (t2o90p8.telia.com [195.67.216.128]) by maild.telia.com (8.9.3/8.9.3) with SMTP id MAA23735 for ; Wed, 25 Oct 2000 12:38:44 +0200 (CEST) From: "James Wilde" To: Subject: IPFW vs IP-Filter Date: Wed, 25 Oct 2000 12:39:01 +0200 Message-ID: <000601c03e6f$c9c1b0e0$8208a8c0@iqunlimited.net> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 In-Reply-To: <20001014000207.98C8037B503@hub.freebsd.org> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I've checked the handbook and other sources on IPFW and IP-Filter and I would appreciate some comments on the two. I assume that one uses either/or and not both. IPFW is compiled into the kernel but IP-Filter runs as an application. I don't know if there is any advantage or disadvantage in this. I have always seen IP-Filter as being the richer in functionality with its statefulness and extra keywords, for example, the 'quick' keyword. My filter of choice therefore has hitherto been IP-Filter. Is there anything I am missing? What are the pros and cons of the two alternatives - and, in fact, any others that the panel would like to consider. TIA mvh/regards James To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message