From owner-freebsd-questions Tue Oct 8 5:16:36 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DED5E37B401 for ; Tue, 8 Oct 2002 05:16:34 -0700 (PDT) Received: from veldy.net (veldy-host33.dsl.visi.com [209.98.200.33]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6907A43E86 for ; Tue, 8 Oct 2002 05:16:34 -0700 (PDT) (envelope-from veldy@veldy.net) Received: from VELDYLT (localhost.veldy.net [127.0.0.1]) by veldy.net (Postfix) with SMTP id 750F54D7; Tue, 8 Oct 2002 07:16:32 -0500 (CDT) Message-ID: <005c01c26ec4$8acc37c0$8204dca7@northamerica.corp.microsoft.com> From: "Thomas T. Veldhouse" To: "ksrgyn -" , References: Subject: Re: IPFW and IpFilter Date: Tue, 8 Oct 2002 07:16:27 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Why would you want to do that? I can think of no reason to use both other than some of the supplemental features of ipfw like bandwidth shaping. Tom Veldhouse ----- Original Message ----- From: "ksrgyn -" To: Sent: Monday, October 07, 2002 3:58 PM Subject: IPFW and IpFilter > > Hi, > > I have a problem where the ipfw and ipfilter can not work together. > I need the packages matching first in the rules of ipfw and after in the > rules of ipfiter. > I configure my kernel with ipfw options before ipfilter options and i > compile but don't work, then i try to compile my kernel with the ipfw > options and without ipfilter options that was loaded as a module, and don't > work too. > The packages must be checked first in IPFW and then they need to be > checked in ipfilter. They are not being checked in IPFW, what's the problem > ? > > This is what i find in IPFILTER FAQ: > > IPF and IPFW both have features I want to use, must I choose between them? > No. You can run them both on a single machine. However, you must take care > to ensure that one package's rules do not interfere with the other's. Note > that the packages get access to rules in the order in which they were > loaded, e.g. if IPFW is compiled in the kernel and IPF is loaded as a > module, IPFW "sees" packets before IPF. > > > _________________________________________________________________ > Tenha você também um MSN Hotmail, o maior webmail do mundo: > http://www.hotmail.com/br > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message