From owner-freebsd-security  Wed Nov 21  9: 6:14 2001
Delivered-To: freebsd-security@freebsd.org
Received: from kumquat.mail.uk.easynet.net (kumquat.mail.uk.easynet.net [195.40.1.42])
	by hub.freebsd.org (Postfix) with ESMTP id 0F48937B416
	for <security@freebsd.org>; Wed, 21 Nov 2001 09:06:12 -0800 (PST)
Received: from magrat.office.easynet.net ([195.40.3.130])
	by kumquat.mail.uk.easynet.net with esmtp (Exim 3.33 #1)
	id 166ap9-0005Bq-00
	for security@FreeBSD.ORG; Wed, 21 Nov 2001 17:06:11 +0000
Received: by MAGRAT with Internet Mail Service (5.5.2653.19)
	id <WM3075C2>; Wed, 21 Nov 2001 17:06:11 -0000
Message-ID: <7052044C7D7AD511A20200508B5A9C585169B7@MAGRAT>
From: Lee Brotherston <lee.brotherston@uk.easynet.net>
To: security@FreeBSD.ORG
Subject: RE: Best security topology for FreeBSD
Date: Wed, 21 Nov 2001 17:06:11 -0000
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain;
	charset="iso-8859-1"
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


| I would use ipfilter for filtering and NAT (if needed), since it is
| actually better at doing that, and ipfw for bandwidth limiting/traffic
| shaping.

If you're getting into shaping, then Dummynet is worth a peek, you do need
ipfw for that.

  Lee


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message