Date: Mon, 11 Dec 2000 00:05:51 +0100 From: =?iso-8859-1?Q?R=E9mi_Guyomarch?= <rguyom@pobox.com> To: freebsd-stable@freebsd.org Subject: Re: IPFIREWALL or IPFILTER? Message-ID: <20001211000551.F22773@diabolic-cow.chatgris.net> In-Reply-To: <20001210232204.A1972@genesis.k.pl>; from ns88@k.pl on Sun, Dec 10, 2000 at 11:22:04PM %2B0100 References: <Pine.BSF.4.21.0012031955270.59659-100000@ipamzlx.physik.uni-mainz.de> <00dd01c05e2e$e42a0700$0b6cffc8@infolink.com.br> <20001209112247.A22773@diabolic-cow.chatgris.net> <002301c062bd$2aeb0440$0b6cffc8@infolink.com.br> <20001210202817.C22773@diabolic-cow.chatgris.net> <20001210232204.A1972@genesis.k.pl>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Dec 10, 2000 at 11:22:04PM +0100, Tomasz Paszkowski wrote: > On Sun, Dec 10, 2000 at 08:28:17PM +0100, Rémi Guyomarch wrote: > > Can you redirect traffic to many internal boxes with a round-robin > > mechanism ? > > man natd You got me on that one ;-) Ok, so I add another one : does ipfw support IPv6 stateful filtering ? Yes, ipfw can filter IPv6 packets, but : - reading the source, it seems to me that ip6fw doesn't have his IPv4 counterpart's stateful additions. - the source is not in the same file, which imply that the two filters might not have the same behaviour / possibilities. - if any, where are those differences documented ? And yes, the ipfilter shipped in fbsd-4.2 isn't configured to filter IPv6. I don't know exactly why, but the patch is in ipfilter's 3.4.14 distribution. -- Rémi To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001211000551.F22773>