Date: Mon, 10 Jul 2000 19:20:09 -0500 (CDT) From: Larry Rosenman <ler@lerctr.org> To: Carlton Haycock <chaycock1@mindspring.com> Cc: freebsd-questions@freebsd.org Subject: Re: ipfilter vs ipfw Message-ID: <200007110020.e6B0K9U23644@lerami.lerctr.org> In-Reply-To: <200007110014.UAA31175@tisch.mail.mindspring.net> "from Carlton Haycock at Jul 10, 2000 08:22:02 pm"
next in thread | previous in thread | raw e-mail | index | archive | help
Seems that IPFilter does BETTER stateful rules than a "hack" (a friends term) to IPFW to do dynamic rules. From running ipfw for a short time, I've converted over to ipfilter. I just wish the rc* scripts supported ipfilter better, and that there was some standard reporting mechanism for the logging output like there is for ipfw. Larry Rosenman > > Hello, > > I am in the process of building a firewall using FreeBsd. I am aware of the firewall > built into the kernel (ipfw), but I also see alot of people talking about another package > called IPFILTER. I have seen comments stating that IPFILTER is better, but no one > has yet to say why or why they prefer it. I would be most appreciative if someone > could give a brief overview of the differences as far as functionality is concerned. > I have read the how-to's and stuff on FreeBsd Diary but can find nothing that does > a comparison of the two. > > Thanks, > Carlton > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 972-414-9812 (voice) Internet: ler@lerctr.org US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200007110020.e6B0K9U23644>