Date: Thu, 21 Jul 2005 07:33:10 +0200 (CEST) From: "Roger Grosswiler" <roger@gwch.net> To: "Jeremie Le Hen" <jeremie@le-hen.org> Cc: freebsd-ipfw@freebsd.org Subject: Re: Most wanted packet filter Message-ID: <32481.62.2.21.164.1121923990.squirrel@www.gwch.net> In-Reply-To: <20050720214706.GY39292@obiwan.tataz.chchile.org> References: <42267.62.2.21.164.1121863057.squirrel@www.gwch.net> <200507201533.53008.max@love2party.net> <1121880253.53529.5.camel@foxdaemon.com> <20050720214706.GY39292@obiwan.tataz.chchile.org>
next in thread | previous in thread | raw e-mail | index | archive | help
> Hi Mark, > >> How difficult is it to switch from IPFW2 to PF or use the two in >> conjunction with one another and are there any good URL "how to" sites >> with that information? > > The syntax is really different, nothing common. But none is difficult. > > It is possible to use both, but this makes maintainability more complex, > IMO. IIRC the precedence of each firewall depends on the order which > they registered on PFIL_HOOKS. The trick to force certain order is to > compile the first one in the kernel and the second on as a module. > Please correct me if I'm wrong. > > Regards, > -- > Jeremie Le Hen > < jeremie at le-hen dot org >< ttz at chchile dot org > > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" > So, the most recommended seems to be pf for the moment. I thank you all very much for your input. Roger
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?32481.62.2.21.164.1121923990.squirrel>