From owner-freebsd-net@FreeBSD.ORG  Tue Oct  7 17:33:24 2014
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 6AE8CCC4
 for <freebsd-net@freebsd.org>; Tue,  7 Oct 2014 17:33:24 +0000 (UTC)
Received: from mail-oi0-x22a.google.com (mail-oi0-x22a.google.com
 [IPv6:2607:f8b0:4003:c06::22a])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 371652BA
 for <freebsd-net@freebsd.org>; Tue,  7 Oct 2014 17:33:24 +0000 (UTC)
Received: by mail-oi0-f42.google.com with SMTP id a141so5468762oig.15
 for <freebsd-net@freebsd.org>; Tue, 07 Oct 2014 10:33:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:from:date:message-id:subject:to:content-type;
 bh=BHoMkNumYVr62B+6yLewe0nFe+XB3yraA4monk2p0kE=;
 b=fMfd8ROTuekGPHiJ7WqFY6xtJGJ6JcmXxu5RF6Fz8s315o5i/Je7m2wC48/4gF2ybg
 w4ngGAlgFO7BReRmnCEHPiAYXpxl85JjncNEUXOV/KropAMydiucUosqJfO5vRr0QuQH
 dpNldtgvd0jrUphVZ+87dpJLoRR+ysBEdr6y75BUuIW64+43MKmBi+FvaJE3vJjYvBDA
 AbwsqLXFOoIaLFqUWBRwYb6anQf122IJewcjTbwONYs8hIbREu1S3mxXoh2i5BEm5uK0
 qwuMDp09w6YxruFQu4zUqxKOn9AeTpDIuxR4UFGiB8KPGiRCGX2L4ffrcxqtL+YpCADF
 +IlA==
X-Received: by 10.60.37.196 with SMTP id a4mr6047829oek.45.1412703203538; Tue,
 07 Oct 2014 10:33:23 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.60.93.40 with HTTP; Tue, 7 Oct 2014 10:33:03 -0700 (PDT)
From: Raimundo Santos <raitech@gmail.com>
Date: Tue, 7 Oct 2014 14:33:03 -0300
Message-ID: <CAGQ6iC_woSTwiUTUih3Uh-R7zw9eg0r==729pkJZesGUnNuQSw@mail.gmail.com>
Subject: ipfw and pf together are reliable?
To: "freebsd-net@freebsd.org" <freebsd-net@freebsd.org>
Content-Type: text/plain; charset=UTF-8
X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net/>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Oct 2014 17:33:24 -0000

Hello list!

I have a need to use FWD in ipfw, but for my needs pf are much way simpler.

I have tested some rules in the past year inside pf, even disabling states,
but things do better with ipfw regarding FWD - do not know way.

I have heard that ipfw and pf could work together, but with a lot of pain.
I think that, if that works well, I can use only FWD in ipfw and the rest
in pf.

Is there a way and a reliable one to do that in 9.2 and 9.3?

Thank you in advance,
Raimundo Santos