From owner-freebsd-security Fri Jun 14 4:33:35 2002 Delivered-To: freebsd-security@freebsd.org Received: from axl.seasidesoftware.co.za (axl.seasidesoftware.co.za [196.31.7.201]) by hub.freebsd.org (Postfix) with ESMTP id 7C5B737B408 for ; Fri, 14 Jun 2002 04:33:31 -0700 (PDT) Received: from sheldonh (helo=axl.seasidesoftware.co.za) by axl.seasidesoftware.co.za with local-esmtp (Exim 3.36 #1) id 17IpJJ-0009KR-00; Fri, 14 Jun 2002 13:32:09 +0200 From: Sheldon Hearn To: Attila Nagy Cc: Andrey Sverdlichenko , security@freebsd.org Subject: Re: firewall 'stateful failover' In-reply-to: Your message of "Fri, 14 Jun 2002 12:40:17 +0200." Date: Fri, 14 Jun 2002 13:32:09 +0200 Message-ID: <35862.1024054329@axl.seasidesoftware.co.za> Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Fri, 14 Jun 2002 12:40:17 +0200, Attila Nagy wrote: > > > Is there a way to handle the state table in ipfw/ipf? I could write > > > scripts to do 'failover', but I'm wandering if there's a way to 'share' > > > the state table between active and standby units or to pass the state > > > table from one firewall to another over a crossover. > This is implemented in IPF4 AFAIK. > You should try its alpha version... No. Darren said it's something he's considering for v4. At this stage, he's not sure whether it'll be part of the standard distribution, a value-add or included at all. Ciao, Sheldon. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message