Date: Wed, 18 Jan 2006 19:14:47 -0500 (EST) From: Peter <petermatulis@yahoo.ca> To: freebsd-questions <freebsd-questions@freebsd.org> Subject: Re: How to tell if IPF is running? Message-ID: <20060119001447.31041.qmail@web60014.mail.yahoo.com> In-Reply-To: <43CE6C7C.2040307@locolomo.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--- Erik Norgaard <norgaard@locolomo.org> wrote: > Gable Barber wrote: > > On 1/18/06, Peter <petermatulis@yahoo.ca> wrote: > >> > >> Switch over to pf. > >> > > Why do you suggest PF over IPF? > > > > Hope I am not starting a war here.. but I am genuinely interested in > the > > opinions. > > I used IPF on FBSD until there was some bug in IPF for 5.x some version > that forced me to switch after an upgrade. The bug has been fixed since > but I have found no reason to go back. > > There are two things I miss from IPF: > > a) proper accounting: You can't count traffic correctly with stateful > filtering on pf, pf will count when a rule is matched but once a state > is established packets for that state are not matched and hence not > counted. That's not true. __________________________________________________________ Find your next car at http://autos.yahoo.ca
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060119001447.31041.qmail>