From owner-freebsd-questions@FreeBSD.ORG Fri Mar 4 12:41:45 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 54E1116A4CE for ; Fri, 4 Mar 2005 12:41:45 +0000 (GMT) Received: from shiva.jussieu.fr (shiva.jussieu.fr [134.157.0.129]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5811043D5A for ; Fri, 4 Mar 2005 12:41:44 +0000 (GMT) (envelope-from jas@math.jussieu.fr) Received: from riemann.math.jussieu.fr (riemann.math.jussieu.fr [134.157.13.3])j24CfSHI037815 ; Fri, 4 Mar 2005 13:41:28 +0100 (CET) X-Ids: 165 Received: from galois2.math.jussieu.fr (galois2.math.jussieu.fr [134.157.13.117])j24CfN2s089554 ; Fri, 4 Mar 2005 13:41:23 +0100 (CET) Received: from galois2.math.jussieu.fr (localhost.localdomain [127.0.0.1]) j24CfNiY019101 ; Fri, 4 Mar 2005 13:41:23 +0100 Received: (from jas@localhost) by galois2.math.jussieu.fr (8.12.8/8.12.8/Submit) id j24CfNcN019100; Fri, 4 Mar 2005 13:41:23 +0100 Date: Fri, 4 Mar 2005 13:41:23 +0100 From: Albert Shih To: "Loren M. Lang" Message-ID: <20050304124123.GA12225@math.jussieu.fr> References: <20050301224201.GC7469@math.jussieu.fr> <20050302090009.R23556@mail.rot-1.de> <20050302115706.GL15179@math.jussieu.fr> <20050303210753.GM30896@alzatex.com> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable In-Reply-To: <20050303210753.GM30896@alzatex.com> User-Agent: Mutt/1.5.6i X-Spam-Score: -2.82 () ALL_TRUSTED X-Scanned-By: MIMEDefang 2.51 on 134.157.13.3 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-1.7.2 (shiva.jussieu.fr [134.157.0.165]); Fri, 04 Mar 2005 13:41:36 +0100 (CET) X-Miltered: at shiva.jussieu.fr with ID 42285778.000 by Joe's j-chkmail (http://j-chkmail.ensmp.fr)! X-Antivirus: scanned by sophie at shiva.jussieu.fr cc: Stevan Tiefert cc: Albert Shih cc: freebsd-questions@freebsd.org Subject: Re: ipfw or pf X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: shih@math.jussieu.fr List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Mar 2005 12:41:45 -0000 Le 03/03/2005 =E0 13:07:53-0800, Loren M. Lang a =E9crit > > Well it's not de syntaxes, I always use packet filter system (sometime = on > > hardware like Foundry/Cisco) where the rule is : First match first use.= And > > the pf use entire rules is very strange for me (I known I can use ?quic= k? > > but....well it's not the philosophy I think). >=20 > I like first match better too, but I think pf is sufficiently better > that I just use it with quick over ipfw. >=20 Better on what ? I really like to known. And my question is not a troll or something like that. Regards -- Albert SHIH Universite de Paris 7 (Denis DIDEROT) U.F.R. de Mathematiques. Heure local/Local time: Fri Mar 4 13:40:29 CET 2005