Date: 11 Feb 2004 18:10:26 -0500 From: Lowell Gilbert <freebsd-questions-local@be-well.ilk.org> To: "Loren M. Lang" <lorenl@alzatex.com> Cc: FreeBSD Mailing list <freebsd-questions@freebsd.org> Subject: Re: FreeBSD has Two Firewalls? Message-ID: <44u11xyzz1.fsf@be-well.ilk.org> In-Reply-To: <20040211140056.GC8118@alzatex.com> References: <20040211130356.GA8118@alzatex.com> <44wu6tspdt.fsf@be-well.ilk.org> <20040211140056.GC8118@alzatex.com>
next in thread | previous in thread | raw e-mail | index | archive | help
"Loren M. Lang" <lorenl@alzatex.com> writes: > It looks like ipfilter is a newer and more improved over ipfw They're independent implementations. > It looks like ipfilter is a newer and more improved over ipfw, but I'm > not sure. I'm looking for a good firewall with similar functionality to > linux's netfilter. Which, as I understand it, is a descendent of ipchains. ipchains is a descendent of an older version of ipfw. > linux's netfilter. Previously I was doing some somewhat sophisticated > things like disabling or limiting internet access for certain indivuals > depending on the time of day, as well as using connection helpers for > ftp, irc, etc. What's the best firewall to use for this? There's a lot of Linux-specific terminology in there, so I can't really unwind it very well. I don't know of any support for time-of-day modifications, but I'd expect that somebody out there has written it. Depending on the exact requirements, it may even be trivial. "Connection helpers" sounds like automatic proxy support, which I'm not crazy about but which I know ipfilter does somewhat more extensively than ipfw. The big advantage of ipfw is that dummynet(4) hooks in through it. Dummynet is a traffic shaper, as well as a framework that sort of resembles (as far as I understand) netfilter. Also note that it's perfectly possible and often quite convenient to use more than one firewall program...
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44u11xyzz1.fsf>