Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 30 Oct 2000 11:37:14 +0300 (MSK)
From:      Jaroshenko Serge <jaroshenko@mail.ru>
To:        Chris Browning <brownicm@prokyon.com>
Cc:        James Wilde <james.wilde@telia.com>, FreeBSD-questions@FreeBSD.ORG
Subject:   Re: IPFW vs IP-Filter
Message-ID:  <Pine.BSF.4.21.0010301127250.30927-100000@freebsd.merlin.ru>
In-Reply-To: <39FCD635.9BA3A1B7@prokyon.com>

next in thread | previous in thread | raw e-mail | index | archive | help


On Sun, 29 Oct 2000, Chris Browning wrote:

> 
> I picked up an extra low-end box and was just about to begin
> playing with ipf. I've been using ipfw for about 9 months
> and have been happy, but, you know...
> 
> If I'm not mistaken, I interpret this post as saying that I
> need the ipfw kernel options to run ipf. 

No.
For ipfilter only need:
options         IPFILTER                #ipfilter support
options         IPFILTER_LOG            #ipfilter logging

Also You may be want include: options IPFILTER_DEFAULT_BLOCK
This give You firewall that default blocking all packets arrive 
your all network interface. 
For more information about ipfilter see ipf-howto.txt on the site
http://www.obfuscation.org/ipf/

Best regards!
Sorry for my bad english!
Serge.

> I had assumed that
> only the ipf options were necessary. What's up here? I'm
> glad I ran across this.
> 
> -- 
> ------------------------
> Chris Browning
> brownicm@prokyon.com
> ------------------------
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0010301127250.30927-100000>