From owner-freebsd-questions Thu Mar 5 23:21:11 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id XAA26123 for freebsd-questions-outgoing; Thu, 5 Mar 1998 23:21:11 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from gdi.uoregon.edu (gdi.uoregon.edu [128.223.170.30]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA26025 for ; Thu, 5 Mar 1998 23:20:45 -0800 (PST) (envelope-from dwhite@gdi.uoregon.edu) Received: from localhost (dwhite@localhost) by gdi.uoregon.edu (8.8.7/8.8.8) with SMTP id XAA25339; Thu, 5 Mar 1998 23:20:32 -0800 (PST) (envelope-from dwhite@gdi.uoregon.edu) Date: Thu, 5 Mar 1998 23:20:32 -0800 (PST) From: Doug White Reply-To: Doug White To: Dave Walton cc: freebsd-questions@FreeBSD.ORG Subject: Re: Firewall setup In-Reply-To: <19980306001426243.AAA137@mail-ftp.nordicdms.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, 5 Mar 1998, Dave Walton wrote: > I'm running 2.2.5-RELEASE and have been planning to set up a firewall > using ipfw and rc.firewall. I just stumbled across IP Filter > (http://coombs.anu.edu.au/ipfilter/), which claims to be included in > FreeBSD-current (post 2.2). Would I be better off installing and > using that package, or should I stick with ipfw? What's the > difference between the two? IPFilter has a more flexible description language and has some other fun features (particularly natd which is now integrated). > Secondly, regardless of which package I use, what are the minimum > requirements for a box that will be filtering traffic on a T1? I'd > hate to be creating a bottleneck... Pentiums with Intel EtherExpress Pro/100B PCI Ethernet cards would be a good start. (or Pro/100+) Doug White | University of Oregon Internet: dwhite@resnet.uoregon.edu | Residence Networking Assistant http://gladstone.uoregon.edu/~dwhite | Computer Science Major To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message