From owner-freebsd-questions@FreeBSD.ORG Thu Nov 17 14:16:18 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9F57516A41F for ; Thu, 17 Nov 2005 14:16:18 +0000 (GMT) (envelope-from AshleyMoran@codeweavers.net) Received: from mta08-winn.ispmail.ntl.com (mta08-winn.ispmail.ntl.com [81.103.221.48]) by mx1.FreeBSD.org (Postfix) with ESMTP id D395243D45 for ; Thu, 17 Nov 2005 14:16:17 +0000 (GMT) (envelope-from AshleyMoran@codeweavers.net) Received: from aamta11-winn.ispmail.ntl.com ([81.103.221.35]) by mta08-winn.ispmail.ntl.com with ESMTP id <20051117141616.ZKAA17804.mta08-winn.ispmail.ntl.com@aamta11-winn.ispmail.ntl.com> for ; Thu, 17 Nov 2005 14:16:16 +0000 Received: from jigsaw-sbs02.jigsawhq.com ([213.106.224.113]) by aamta11-winn.ispmail.ntl.com with ESMTP id <20051117141616.ZNYW16192.aamta11-winn.ispmail.ntl.com@jigsaw-sbs02.jigsawhq.com> for ; Thu, 17 Nov 2005 14:16:16 +0000 X-Filtered-With-Copfilter: Version 0.81.6 (ProxSMTP 1.2.1) X-Copfilter-Virus-Scanned: ClamAV 0.87/1177 - Thu Nov 17 08:35:37 2005 X-Copfilter: Client is part of our network, skipped SpamAssassin Received: from alfie.jigsawhq.com ([192.168.0.181] RDNS failed) by jigsaw-sbs02.jigsawhq.com with Microsoft SMTPSVC(5.0.2195.6713); Thu, 17 Nov 2005 12:21:16 +0000 From: Ashley Moran Organization: Codeweavers Ltd To: freebsd-questions@freebsd.org Date: Thu, 17 Nov 2005 12:21:22 +0000 User-Agent: KMail/1.8.3 References: <2709F1B8E7C94F02B8B8E920@[192.168.10.249]> In-Reply-To: <2709F1B8E7C94F02B8B8E920@[192.168.10.249]> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200511171221.22923.ashley.moran@codeweavers.net> X-OriginalArrivalTime: 17 Nov 2005 12:21:16.0313 (UTC) FILETIME=[68454890:01C5EB71] Subject: Re: Which firewall? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Nov 2005 14:16:18 -0000 On Thursday 17 November 2005 10:15, Sasa Stupar wrote: > Hi! > > I am about to set up a router with FBSD 5.4 for SOHO network. There will be > no servers running, only inet access for the users but I'd like to make > traffic limitation for users (download and upload). Which firewall of the > three one explained in the handbook do you recommend? > > Regards, > Sasa Sasa We have found pf to be the best firewall. It's got a simple and flexible configuration, and using pfsync you can configure redundant firewalls. (You can literally pul the plug on one and connections across the firewall cluster will continue uninterrupted. Ashley