From owner-freebsd-security Wed Nov 21 9:19:39 2001 Delivered-To: freebsd-security@freebsd.org Received: from dreamflow.nl (dreamflow.nl [62.58.36.22]) by hub.freebsd.org (Postfix) with SMTP id 037FA37B416 for ; Wed, 21 Nov 2001 09:19:32 -0800 (PST) Received: (qmail 16758 invoked by uid 1000); 21 Nov 2001 17:19:30 -0000 Date: Wed, 21 Nov 2001 18:19:29 +0100 From: Bart Matthaei To: freebsd-security@rikrose.net Cc: security@freebsd.org Subject: Re: Best security topology for FreeBSD Message-ID: <20011121181929.A15275@heresy.dreamflow.nl> References: <7052044C7D7AD511A20200508B5A9C585169B6@MAGRAT> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="CE+1k2dSO48ffgeK" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from freebsd-security@rikrose.net on Wed, Nov 21, 2001 at 05:01:15PM +0000 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --CE+1k2dSO48ffgeK Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Wed, Nov 21, 2001 at 05:01:15PM +0000, freebsd-security@rikrose.net wrote: > Basically, ipfw doesn't give as much control over the packets and > filtering as ipfilter, so use both. Care to explain why ? I think ipfw/ipf handle packets just as well.. The only thing i recall is a story about ipfw sending packets trough userland (?!). But thats just a vague story i've read somewhere. I dont see why ipfw can't do what he needs. Ipfw works pretty well with NAT, and it's good with traffic shaping. And I personally haven't had any troubles with ipfw filtering. Regards, B. -- Bart Matthaei bart@dreamflow.nl /* Welcome to my world.. You just live in it */ --CE+1k2dSO48ffgeK Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7++Ihgcc6pR+tCegRAhQUAKC0OftBR5KxsuzRMHhOiM+Sk1+mkwCfScoD M1a8XMAm7VnxvCpMiQmWCq0= =V4E3 -----END PGP SIGNATURE----- --CE+1k2dSO48ffgeK-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message