Date: Sun, 26 Jun 2005 22:15:59 +0100 From: Alex Zbyslaw <xfb52@dial.pipex.com> To: Giorgos Keramidas <keramida@ceid.upatras.gr> Cc: Paul Schmehl <pauls@utdallas.edu>, freebsd-questions@freebsd.org Subject: Re: firewall on FreeBSD Message-ID: <42BF1B0F.6010402@dial.pipex.com> In-Reply-To: <20050626031837.GB3020@gothmog.gr> References: <MIEPLLIBMLEEABPDBIEGMEIMHHAA.fbsd_user@a1poweruser.com> <200506241731.13651.martin@orbweavers.co.uk> <08A3A012657D73D10A220154@Paul-Schmehls-Computer.local> <20050625064224.GB4460@masterpost> <1585990126FE46C02925C321@Paul-Schmehls-Computer.local> <42BDEB5E.5030003@dial.pipex.com> <20050626031837.GB3020@gothmog.gr>
next in thread | previous in thread | raw e-mail | index | archive | help
Giorgos Keramidas wrote: >On 2005-06-26 00:40, Alex Zbyslaw <xfb52@dial.pipex.com> wrote: > > >>Paul Schmehl wrote: >> >> >>>pf on freebsd does support the "quick" keyword. The "default" >>>firewall, ipfw, does not. >>> >>> >>This makes no sense to me. The two firewalls work very differently. >> >>[...] >> >You describe very nicely the way rules are matched by two of the three >different firewalls available on FreeBSD. The description, being very >correct, *does* make sense. > >Why do you say that ``This makes no sense to you'' > > Maybe I'm misreading something, or taking it out of context, but the statement "ipfw does not support the quick keyword" makes no sense to me. For me, it implies that somehow ipfw could (or even should) support the quick keyword, and that is nonsensical. The way ipfw rules work there is not only no need to support a quick keyword, but no point in supporting one because all relevant matches are already quick, by definition. Maybe I'm being overly pedantic, but if I had stumbled across this message in an archive search, and knew nothing about FreeBSD firewalls, I could easily take it to mean that ipfw was lacking a feature with respect to pf when, in fact, it wasn't. (There may be plenty of other reasons for picking one firewall or the other, but the "lack" of a quick keyword in ipfw isn't one of them). Am *I* making any more sense, now? --Alex
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?42BF1B0F.6010402>