Date: Fri, 28 Jul 2000 07:29:10 +1000 (EST) From: Darren Reed <avalon@coombs.anu.edu.au> To: billf@chimesnet.com (Bill Fumerola) Cc: avalon@coombs.anu.edu.au, kellysm_2k@yahoo.com, freebsd-security@FreeBSD.ORG Subject: Re: ipfw vs ipfilter Message-ID: <200007272129.HAA04394@cairo.anu.edu.au> In-Reply-To: <20000727172410.O51462@jade.chc-chimes.com> from Bill Fumerola at "Jul 27, 0 05:24:10 pm"
next in thread | previous in thread | raw e-mail | index | archive | help
In some mail from Bill Fumerola, sie said: > On Thu, Jul 27, 2000 at 08:28:01PM +1000, Darren Reed wrote: > > > > Is one better than the other? Why? Does it depend on the situation? > > > > ipfw is marginally better for freebsd because it supports all the > > freebsd specific hacks - not that this buys you anything wonderful > > in terms of filtering. ipfilter is generally considered to be the > > "leading" public domain packet filtering package and I try to ensure > > it stays that way :-) For example, the state tracking code in IP Filter > > is still without an equal. If you are *serious* about your security > > you wouldn't use ipfw (by serious I mean not for home/small company > > use, where physical security is recognised, etc). > > Does ipfilter have rate limiting? no...and lots of people ask for it too O:-/ personally, it's not clear to me that this belongs there - ALTQ (whatever that is) often gets cited for doing that sort of work. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200007272129.HAA04394>