Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 22 Jun 1996 17:19:02 +0200 (MET DST)
From:      guido@gvr.win.tue.nl (Guido van Rooij)
To:        taob@io.org (Brian Tao)
Cc:        freebsd-security@FreeBSD.org
Subject:   Re: IPFW vs. IP Filter?
Message-ID:  <199606221519.RAA05233@gvr.win.tue.nl>
In-Reply-To: <Pine.NEB.3.92.960622093653.4366O-100000@zap.io.org> from Brian Tao at "Jun 22, 96 09:51:50 am"

next in thread | previous in thread | raw e-mail | index | archive | help
Brian Tao wrote:
>     I'm setting up a FreeBSD-based firewall here, and my original plan
> was to go with IPFW in the kernel.  However, it seems there isn't any
> recent documentation for it (both the man page and the handbook entry
> are out of date).  IP Filter 3.0.4 (http://coombs.anu.edu.au/~avalon/)
> also looks very nice, and Andrew Stesin recently recommended it here.
> 
>     Should I disable IPFW in the kernel and put IP Filter in its place
> then, or can (should?) the two coexist?  My main beef is that the IPFW
> documentation is rather lacking, and /usr/src/sbin/ipfw/ipfw.c isn't
> helpfully commented.  Suggestions appreciated.  Thanks.

I have a router with both ipfilter and ipfw. However, it is an early
version of ipfilter. I think it can cooperate well, though I havent looked
at the sources recently. You can ask Daren Reed, the auithor of
ipfilter (avalon@coombs.anu.edu.au). I think he's also using FreeBSD
these days.

-Guido



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199606221519.RAA05233>