Date: Fri, 12 Oct 2001 18:56:48 +0200 (CEST) From: Henrik Holmstam <turbo@lamering.org> To: Kenneth Wayne Culver <culverk@wam.umd.edu> Cc: Alfatrion <alfatrion@cybertron.tmfweb.nl>, "Maine LOA List Admin (Brent Bailey)" <brentb@loa.com>, "Hartmann, O." <ohartman@klima.physik.uni-mainz.de>, <freebsd-stable@FreeBSD.ORG>, <freebsd-questions@FreeBSD.ORG> Subject: Re: IPFW or IPFILTER? Message-ID: <20011012185458.K69352-100000@darkwing.turbo.net> In-Reply-To: <Pine.GSO.4.21.0110121216390.27495-100000@sun10pg2.wam.umd.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Can IPFW keep state on UDP and ICMP as IPFilter can? On Fri, 12 Oct 2001, Kenneth Wayne Culver wrote: > On Fri, 12 Oct 2001, Alfatrion wrote: > > > Maine LOA List Admin (Brent Bailey) wrote: > > > > > I tried IPFILTER for awhile ...and it very easy to use...but ..in my opinion > > > it isnt as configurable as IPFW. > > > IPFW is a little more to setup ...but still pretty easy ...and the syntax > > > isnt that hard to understand. Its best feature is its VERY > > > configurable...and as long as you keep logging to a minimum ...it doesnt use > > > alot of resources. > > > Seems its memeory intensive than anything ...running a firewall that is > > > > > > > I find IPF more configurable as IPFW. I don't know how to do the > > folowing in IPFW: pass out quick on tun0 proto tcp from any to any keep > > state. > > > IPFW has state keeping, but I don't think it's anywhere as easy to get it > working right. > > Ken > > > Alex > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-questions" in the body of the message > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011012185458.K69352-100000>