From owner-freebsd-stable Mon Sep 11 16:37:33 2000 Delivered-To: freebsd-stable@freebsd.org Received: from privatecube.privatelabs.com (privatecube.privatelabs.com [198.143.31.30]) by hub.freebsd.org (Postfix) with ESMTP id F38DD37B424 for ; Mon, 11 Sep 2000 16:37:29 -0700 (PDT) Received: from misha.privatelabs.com (root@misha.privatelabs.com [198.143.31.6]) by privatecube.privatelabs.com (8.9.3/8.9.2) with ESMTP id SAA09631; Mon, 11 Sep 2000 18:56:39 -0400 Received: from virtual-estates.net (mi@localhost [127.0.0.1]) by misha.privatelabs.com (8.9.3/8.9.3) with ESMTP id TAA27194; Mon, 11 Sep 2000 19:37:23 -0400 (EDT) (envelope-from mi@virtual-estates.net) Message-Id: <200009112337.TAA27194@misha.privatelabs.com> Date: Mon, 11 Sep 2000 19:37:21 -0400 (EDT) From: mi@aldan.algebra.com Subject: Re: firewall rules for applications To: Bill Fumerola Cc: stable@freebsd.org In-Reply-To: <20000911185759.W47559@jade.chc-chimes.com> MIME-Version: 1.0 Content-Type: TEXT/plain; CHARSET=US-ASCII Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On 11 Sep, Bill Fumerola wrote: = On Mon, Sep 11, 2000 at 03:49:15PM -0700, Alfred Perlstein wrote: = = > > That's correct. And I'm trying to be one of those and think ahead to see = > > the time when a giant software packages will be available to me on = > > FreeBSD, but I'll want to limit their network access. = > = > UFS is getting ACLs, I don't know exactly what they will offer but = > they might include branding that allows one to match the ACLs against = > ipfw rules. = = It's reasonable to assume it can be done, but its only going to slow down = ipfw even worse then it already is. But only if one chooses to use the new feature, right? -mi To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message