Date: Thu, 25 Nov 1999 08:52:28 +1100 From: Tony Landells <ahl@austclear.com.au> To: ipfw@freebsd.org, arch@freebsd.org Subject: Re: new IPFW Message-ID: <199911242152.IAA26077@tungsten.austclear.com.au> In-Reply-To: Your message of "Wed, 24 Nov 1999 02:26:29 -0800." <199911241026.CAA45230@gndrsh.dnsmgr.net>
next in thread | previous in thread | raw e-mail | index | archive | help
[ using BPF for ipfw ] One concern I would have with that is that there are a lot of tools built on BPF that I would prefer to not be able to run on the firewall. Well, to be more accurate, I'd love to be able to run them on the firewall, but I don't want attackers to have access to them, and the safest option is to not even have support in the kernel for them (I can always plug in a separate sniffer if I really need it). Cheers, Tony To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199911242152.IAA26077>