Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 26 Oct 2001 12:46:35 +0400 (MSD)
From:      Alexei Zakirov <frank@unshadow.net>
To:        "Nickolay A.Kritsky" <nkritsky@internethelp.ru>
Cc:        <freebsd-security@freebsd.org>
Subject:   Re: ipfw and ipf on one box
Message-ID:  <Pine.BSF.4.32.0110261241060.2595-100000@hellbell.domain>
In-Reply-To: <1682052180.20011026112359@internethelp.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 26 Oct 2001, Nickolay A.Kritsky wrote:

>   Hi all.
>
>    Has anybody an experience of concurrent work of ipfw and ipfilter on
> one FreeBSD box? Is it possible? What will be the order of packets

yes it's possible. I'm using this combination to get an in-kernel ipf NAT
and ipfw working together.

As I can see order is following:
PKT -> (ipnat) -> (ipfilter) -> (ipfw) -> (bpf) -> INTERFACE OUT

PKT <- (ipfw) <- (ipf) <- (ipnat) <- (bpf) <- INTERFACE IN

*** WBR, Alexei Zakirov (frank@unshadow.net)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.32.0110261241060.2595-100000>