Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 25 Oct 2000 12:39:01 +0200
From:      "James Wilde" <james.wilde@telia.com>
To:        <FreeBSD-questions@FreeBSD.ORG>
Subject:   IPFW vs IP-Filter
Message-ID:  <000601c03e6f$c9c1b0e0$8208a8c0@iqunlimited.net>
In-Reply-To: <20001014000207.98C8037B503@hub.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
I've checked the handbook and other sources on IPFW and IP-Filter and I
would appreciate some comments on the two.

I assume that one uses either/or and not both.  IPFW is compiled into the
kernel but IP-Filter runs as an application.  I don't know if there is any
advantage or disadvantage in this.  I have always seen IP-Filter as being
the richer in functionality with its statefulness and extra keywords, for
example, the 'quick' keyword.

My filter of choice therefore has hitherto been IP-Filter.  Is there
anything I am missing?  What are the pros and cons of the two alternatives -
and, in fact, any others that the panel would like to consider.

TIA

mvh/regards

James



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000601c03e6f$c9c1b0e0$8208a8c0>