From owner-freebsd-stable Fri Mar 9 6:49:28 2001 Delivered-To: freebsd-stable@freebsd.org Received: from veldy.net (w028.z064001117.msp-mn.dsl.cnc.net [64.1.117.28]) by hub.freebsd.org (Postfix) with ESMTP id 19BEA37B719 for ; Fri, 9 Mar 2001 06:49:26 -0800 (PST) (envelope-from veldy@veldy.net) Received: from HP2500B (fuggle.veldy.net [64.1.117.28]) by veldy.net (Postfix) with SMTP id E9A74BA0A; Fri, 9 Mar 2001 08:48:42 -0600 (CST) Message-ID: <002f01c0a8a7$c3e9fb30$3028680a@tgt.com> From: "Thomas T. Veldhouse" To: , , "Christopher Schulte" References: <5.0.2.1.0.20010308160207.02762e18@pop.schulte.org> Subject: Re: 4.2-R, bridging and ipfilter Date: Fri, 9 Mar 2001 08:46:43 -0600 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG IPFILTER is an alternative to IPFIREWALL. As far as I know, IPFILTER does not work on bridged packets -- so you can not firewall you LAN transparently using a IPFILTER bridge. IPFIREWALL does filter bridged packets. However, I don't believe the stateful rules processing is as robust. I was getting errors about too many states and such -- so I went back to IPFILTER using IPNAT (using bimap). Tom Veldhouse veldy@veldy.net ----- Original Message ----- From: "Christopher Schulte" To: ; Sent: Thursday, March 08, 2001 4:03 PM Subject: Re: 4.2-R, bridging and ipfilter > At 04:48 PM 3/8/2001 -0500, arr@oceanwave.com wrote: > >Has anyone gotten bridging and ipfilter to work together with 4.2-R? > > Question: do you mean IPFIREWALL and bridging? > > If so, yes. > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message