Date: Thu, 26 Oct 2006 02:56:26 +0300 From: Cristian KLEIN <cristi@net.utcluj.ro> To: Max Laier <max@love2party.net> Cc: freebsd-doc@freebsd.org Subject: Re: Multiple firewalls Message-ID: <453FF9AA.6010200@net.utcluj.ro> In-Reply-To: <200610251343.06622.max@love2party.net> References: <453E9FC7.4000307@net.utcluj.ro> <200610251343.06622.max@love2party.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Max Laier wrote: > On Wednesday 25 October 2006 01:20, Cristian KLEIN wrote: >> Hi everybody, >> >> Please review the following article: >> http://cristiklein.c7obs.net/public/doc/en_US.ISO8859-1/books/handbook/ >> firewalls-multi.html > > "Note: At the time of this writing, using IPFW and PF is not recommended." > > Where do you get such information? I know of several successful > installations doing things like divert for L7 filtering in ipfw > and "normal" firewalling in pf. Also note, that in order to use ipfw's > ALTQ pf (eventhough one w/o a filtering ruleset) is required. You are right. That info must date from the time I had haluciantions. I have done more testing and found no problem. I have switched from IPFW+IPNAT to IPFW+IPNAT+PF to IPFW+PF. All worked as expected. I must say I like IPFW+PF more, because it makes passive FTP easy, even if a very restrictive firewall is desired. My appologies for misinforming the community. Seems that I have to write another section called IPFW+PF. :)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?453FF9AA.6010200>