From owner-freebsd-questions Wed Nov 29 11:15: 4 2000 Delivered-To: freebsd-questions@freebsd.org Received: from pogo.caustic.org (pogo.caustic.org [208.44.193.69]) by hub.freebsd.org (Postfix) with ESMTP id 9CA8437B400 for ; Wed, 29 Nov 2000 11:15:00 -0800 (PST) Received: from localhost (jan@localhost) by pogo.caustic.org (8.11.0/ignatz) with ESMTP id eATJEwP28080; Wed, 29 Nov 2000 11:14:58 -0800 (PST) Date: Wed, 29 Nov 2000 11:14:58 -0800 (PST) From: "f.johan.beisser" To: Matt Bettinger Cc: questions@FreeBSD.ORG Subject: Re: ipfw relies on ipfilter? In-Reply-To: <71F816A89AA9D3119F4C00D0B7094EFC206322@FIN_SYN> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG good thing to be confused. here's the lowdown: FreeBSD comes with two FireWalling packages. you can use both, or either as you want. they are IPFilter (aka ipf) and IPFirewall (aka, ipfw). more information on IPFilter (ipf) can be found in /usr/src/contrib/ipfilter. that directory has quite a bit. to enable it in the kernel, include these lines: options IPFILTER please note that modern versions of FreeBSD should have kernel modules for ipfiter. IPFirewall, on the other hand, is the defacto standard on FreeBSD. most of the briding, diverting, and similar router functions on freebsd are done through IPFW. enable this in the kernel with: options IPFIREWALL dig through the LINT file for more information. -- jan On Wed, 29 Nov 2000, Matt Bettinger wrote: > > Hello, > > I need some clarification about this IPf and ipfw. I keep getting mixed > information it seems like the more i read the more confused i get. I have > had people try and help me and all i get are discrepancies. People tell me > there are good manuals out there but they just confuse me more. Take this > one for example off of securify.com... > > How to build a BSD firewall using ipfilter. Covers everything from kernel > config to allowing > traffic. Homepage here. By Larry W. Cashdollar To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message