From owner-freebsd-questions@FreeBSD.ORG  Thu May 29 21:26:22 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0267A37B401
	for <freebsd-questions@freebsd.org>;
	Thu, 29 May 2003 21:26:22 -0700 (PDT)
Received: from mail.cs.ait.ac.th (mail.cs.ait.ac.th [192.41.170.16])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A1CBD43F85
	for <freebsd-questions@freebsd.org>;
	Thu, 29 May 2003 21:26:20 -0700 (PDT)	(envelope-from on@cs.ait.ac.th)
Received: from banyan.cs.ait.ac.th (on@banyan.cs.ait.ac.th [192.41.170.5])
	by mail.cs.ait.ac.th (8.12.3/8.9.3) with ESMTP id h4U4QHmE002694
	for <freebsd-questions@freebsd.org>;
	Fri, 30 May 2003 11:26:18 +0700 (ICT)
Received: (from on@localhost)
	by banyan.cs.ait.ac.th (8.8.5/8.8.5) id LAA10467;
	Fri, 30 May 2003 11:27:55 +0700 (ICT)
Date: Fri, 30 May 2003 11:27:55 +0700 (ICT)
Message-Id: <200305300427.LAA10467@banyan.cs.ait.ac.th>
X-Authentication-Warning: banyan.cs.ait.ac.th: on set sender to
	on@banyan.cs.ait.ac.th using -f
From: Olivier Nicole <on@cs.ait.ac.th>
To: freebsd-questions@freebsd.org
In-reply-to: <20030528110038-184800041> (FBSD_User@a1poweruser.com)
References: <20030528110038-184800041>
X-Virus-Scanned: by amavisd-milter (http://amavis.org/)
Subject: Re: ipfw and statefull rules
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 30 May 2003 04:26:22 -0000

>  For the max in firewall
> protection you should use IPFILTER/IPNAT the other Firewall that is
> included with FBSD. IPFW2 is over bloated with functions which are
> so special purpose that no one uses. I know the FBSD manual kind of
> infers that ipfw is the preferred firewall but it really is not,
> those in the know use IPFILTER/IPNAT because it is so much easier to
> get stateful protection for your lan machines.

OK, I have been a good boy, read the ipf documentation, until I found
out that FreeBSD+ipf+bridge does not work.

So...

Olivier