From owner-freebsd-questions Wed May 2 20:33:35 2001 Delivered-To: freebsd-questions@freebsd.org Received: from grumpy.dyndns.org (user-24-214-76-217.knology.net [24.214.76.217]) by hub.freebsd.org (Postfix) with ESMTP id DF01B37B422 for ; Wed, 2 May 2001 20:33:31 -0700 (PDT) (envelope-from dkelly@grumpy.dyndns.org) Received: from localhost (localhost [127.0.0.1]) by grumpy.dyndns.org (8.11.3/8.11.3) with ESMTP id f433WG385971; Wed, 2 May 2001 22:32:16 -0500 (CDT) (envelope-from dkelly@grumpy.dyndns.org) Message-Id: <200105030332.f433WG385971@grumpy.dyndns.org> X-Mailer: exmh version 2.3.1 01/18/2001 with nmh-1.0.4 To: "Doug Young" Cc: freebsd-questions@FreeBSD.ORG From: David Kelly Subject: Re: IPF/IPFW In-reply-to: Message from "Doug Young" of "Thu, 03 May 2001 12:48:43 +1000." <01da01c0d37b$936e6e60$0300a8c0@oracle> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Wed, 02 May 2001 22:32:16 -0500 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG "Doug Young" writes: > I'm trying to figure that out too. As far as I can tell only IPFW is > installed by default (albeit needing kernel tweaking to activate), dunno > where one gets IPF from .... doesn't appear to be a sysinstall package or a > port so possibly its gotta be acquired from wherever & compiled. According > to some reports (freebsddiary et al) IPF has more functionality (whatever > that implies). > > Something else I'd like to know .... seems IPFW is enabled by default in > OpenBSD so why not in FreeBSD ?? Its not *turned on* by default. But its there without kernel tweaks. If you "firewall_enable=YES" in /etc/rc.conf then /etc/rc.network will "kldload ipfw" if it doesn't find ipfw statically in the kernel. -- David Kelly N4HHE, dkelly@hiwaay.net ===================================================================== The human mind ordinarily operates at only ten percent of its capacity -- the rest is overhead for the operating system. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message