From owner-freebsd-questions  Fri Oct 12  9:57:18 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from ipv6.lamering.org (h235n2fls34o847.telia.com [213.67.19.235])
	by hub.freebsd.org (Postfix) with SMTP id 61B1037B405
	for <freebsd-questions@FreeBSD.ORG>; Fri, 12 Oct 2001 09:57:10 -0700 (PDT)
Received: (qmail 44372 invoked by uid 1000); 12 Oct 2001 16:56:49 -0000
Date: Fri, 12 Oct 2001 18:56:48 +0200 (CEST)
From: Henrik Holmstam <turbo@lamering.org>
X-X-Sender:  <turbo@darkwing.turbo.net>
To: Kenneth Wayne Culver <culverk@wam.umd.edu>
Cc: Alfatrion <alfatrion@cybertron.tmfweb.nl>,
	"Maine LOA List Admin (Brent Bailey)" <brentb@loa.com>,
	"Hartmann, O." <ohartman@klima.physik.uni-mainz.de>,
	<freebsd-stable@FreeBSD.ORG>, <freebsd-questions@FreeBSD.ORG>
Subject: Re: IPFW or IPFILTER?
In-Reply-To: <Pine.GSO.4.21.0110121216390.27495-100000@sun10pg2.wam.umd.edu>
Message-ID: <20011012185458.K69352-100000@darkwing.turbo.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


Can IPFW keep state on UDP and ICMP as IPFilter can?


On Fri, 12 Oct 2001, Kenneth Wayne Culver wrote:

> On Fri, 12 Oct 2001, Alfatrion wrote:
>
> > Maine LOA List Admin (Brent Bailey) wrote:
> >
> > > I tried IPFILTER for awhile ...and it very easy to use...but ..in my opinion
> > > it isnt as configurable as IPFW.
> > > IPFW is a little more to setup ...but still pretty easy ...and the syntax
> > > isnt that hard to understand. Its best feature is its VERY
> > > configurable...and as long as you keep logging to a minimum ...it doesnt use
> > > alot of resources.
> > > Seems its memeory intensive than anything ...running a firewall that is
> > >
> >
> > I find IPF more configurable as IPFW. I don't know how to do the
> > folowing in IPFW: pass out quick on tun0 proto tcp from any to any keep
> > state.
> >
> IPFW has state keeping, but I don't think it's anywhere as easy to get it
> working right.
>
> Ken
>
> > Alex
> >
> >
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-questions" in the body of the message
> >
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-stable" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message