From owner-freebsd-ipfw Mon Dec 13 14:45:16 1999 Delivered-To: freebsd-ipfw@freebsd.org Received: from mail.dbitech.bc.ca (i.caniserv.com [139.142.95.1]) by hub.freebsd.org (Postfix) with SMTP id 763BF14D21 for ; Mon, 13 Dec 1999 14:45:11 -0800 (PST) (envelope-from darcy@ok-connect.com) Received: (qmail 8121 invoked from network); 13 Dec 1999 22:45:06 -0000 Received: from ccliii.caniserv.com (HELO dbitech) (darcyb@139.142.95.253) by 139.142.95.10 with SMTP; 13 Dec 1999 22:45:06 -0000 Message-Id: <3.0.32.19991213144606.00ac3590@mail.ok-connect.com> X-Sender: darcyb@mail.ok-connect.com X-Mailer: Windows Eudora Pro Version 3.0 (32) Date: Mon, 13 Dec 1999 14:46:06 -0800 To: freebsd-ipfw@FreeBSD.ORG From: Darcy Buskermolen Subject: ipfw as a statefull firewall Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-ipfw@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I'm looking to use ipfw as a statefull firewall (much like checkpoint FW-1 does) for use in a one to one NAT configuration. syn/ack filter is OK, however thes can of course be spoofed. From my understanding this functionality is available in ipfilter. Is it also available in ipfw ? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message