Date: Sun, 14 Mar 1999 19:29:51 +0100 From: sthaug@nethelp.no To: wes@softweyr.com Cc: ru@ucb.crimea.ua, dg@FreeBSD.ORG, hackers@FreeBSD.ORG Subject: Re: ipflow and ipfirewall Message-ID: <5418.921436191@verdi.nethelp.no> In-Reply-To: Your message of "Sun, 14 Mar 1999 11:23:43 -0700" References: <36EBFEAF.C37CFCE6@softweyr.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> > The way I see it, "fast forward" would be for router boxes at the core > > of your network. Here you're concerned about speed. Firewall filtering > > you normally want to do at the edges, where you're not so concerned about > > speed. > > Apparently you see only networks where all users are equally trusted. No. > Most don't. Of course, if you were really worried about security, > you wouldn't be using shared media and routers, would you? I think you're misunderstanding what I'm saying. I think that having a "fast forward" option *available* is nice - for instance for situations where you want your FreeBSD box to *only* act as a router and want the highest performance. If you don't like the fact that the "fast foward" path doesn't include filtering, then you simply shouldn't use the "fast foward" path. Is this so difficult? Steinar Haug, Nethelp consulting, sthaug@nethelp.no To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5418.921436191>