Date: Mon, 21 Oct 2002 06:32:50 +0200 From: Roman Neuhauser <neuhauser@bellavista.cz> To: freebsd-reply@akruijff.dds.nl Cc: Redmond Militante <r-militante@northwestern.edu>, freebsd-questions@freebsd.org Subject: Re: favorite security software Message-ID: <20021021043250.GE586@freepuppy.bellavista.cz> In-Reply-To: <18415058332.20021019020210@dds.nl> References: <20021018234041.GA28868@darkpossum> <18415058332.20021019020210@dds.nl>
next in thread | previous in thread | raw e-mail | index | archive | help
# freebsd@akruijff.dds.nl / 2002-10-19 02:02:10 +0200:
> Saturday, October 19, 2002, 1:40:42 AM, you wrote:
> RM> do people have any favorite security software that they always run in addition to ipfw or ipfilter?
>
> My favorite firewall is ipfilter. Mainly because it doesn't run in
> userland like ipfw does.
hrmm, this is nonsense. ipfw sits in kernel of course. what runs in
userland is its companion, natd(8). if you don't nat you don't need
to care. if you don't nat on a very slow/loaded box, that is.
as has been said on the list, the fact that natd is a userland
process has its ups as well: a bug in natd won't panic your gateway
(i gathered from the lists that there used to be a bug in ipnat that
caused just that).
n.b.: i'm an ipfilter user.
--
If you cc me or take the list(s) out completely I'll most likely
ignore your message.
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021021043250.GE586>