Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 30 Apr 1996 10:37:52 +1000 (EST)
From:      Darren Reed <avalon@coombs.anu.edu.au>
To:        kristyn@gnu.ai.mit.edu (Kristyn Fayette)
Cc:        freebsd-security@freebsd.org
Subject:   Re: FreeBSD & firewalls
Message-ID:  <199604300038.RAA26673@freefall.freebsd.org>
In-Reply-To: <199604292259.SAA07646@spiff.gnu.ai.mit.edu> from "Kristyn Fayette" at Apr 29, 96 06:58:42 pm

next in thread | previous in thread | raw e-mail | index | archive | help
In some mail from Kristyn Fayette, sie said:
> 
> Hi,
> 
>   I'm getting ready to set up a firewall and I was wondering if anyone can
> give me some suggestions.  Currently, I've got a firewall running on an Indy.
> It's using the internet firewall toolkit.  Now I'm about to replace that
> machine with a FreeBSD system.  Should I keep that toolkit, or should I use
> the ipfw program that comes with 2.1?
> 
>   I know this is the kind of question everyone hates...is brand X better
> than brand Y, but I really don't have much reference right now and time
> is kinda short.

If you want to use the FreeBSD box as a drop-in replacement, use the FWTK
as you should be able to just copy over the config. files.  You won't have
to spend time creating new ones, verifying them, etc.

If you're serious about doing firewalling with FreeBSD and moving away from
the Firewall Toolkit, checkout
http://coombs.anu.edu.au/~avalon/ip-filter.html
- but only if you want to move away from the tookit, which, if it is working,
I wouldn't recommend so long as you can build it easily on FreeBSD (you
shouldn't have much trouble with 2.1).

darren



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199604300038.RAA26673>