From owner-freebsd-security Fri Oct 26 8: 5:16 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail.wlcg.com (mail.wlcg.com [198.92.199.5]) by hub.freebsd.org (Postfix) with ESMTP id 8829037B409 for ; Fri, 26 Oct 2001 08:05:09 -0700 (PDT) Received: (from root@localhost) by mail.wlcg.com (8.11.6/8.11.6) id f9QF59F48571; Fri, 26 Oct 2001 11:05:09 -0400 (EDT) (envelope-from rsimmons@wlcg.com) Received: from localhost (rsimmons@localhost) by mail.wlcg.com (8.11.6/8.11.6) with ESMTP id f9QF55t48561; Fri, 26 Oct 2001 11:05:06 -0400 (EDT) (envelope-from rsimmons@wlcg.com) X-Authentication-Warning: mail.wlcg.com: rsimmons owned process doing -bs Date: Fri, 26 Oct 2001 11:05:02 -0400 (EDT) From: Rob Simmons To: Alexei Zakirov Cc: "Nickolay A.Kritsky" , Subject: Re: ipfw and ipf on one box In-Reply-To: Message-ID: <20011026110215.O88733-100000@mail.wlcg.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Virus-Scanned: by AMaViS perl-10 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org -----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 Has anyone had any luck getting dummynet to work with ipfilter? In LINT it mentions that you need IPFIREWALL with dummynet. Can IPFILTER be substituted? Robert Simmons Systems Administrator http://www.wlcg.com/ On Fri, 26 Oct 2001, Alexei Zakirov wrote: > On Fri, 26 Oct 2001, Nickolay A.Kritsky wrote: > > > Hi all. > > > > Has anybody an experience of concurrent work of ipfw and ipfilter on > > one FreeBSD box? Is it possible? What will be the order of packets > > yes it's possible. I'm using this combination to get an in-kernel ipf NAT > and ipfw working together. > > As I can see order is following: > PKT -> (ipnat) -> (ipfilter) -> (ipfw) -> (bpf) -> INTERFACE OUT > > PKT <- (ipfw) <- (ipf) <- (ipnat) <- (bpf) <- INTERFACE IN > > *** WBR, Alexei Zakirov (frank@unshadow.net) > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE72Xuhv8Bofna59hYRA9ijAJ0aGDGrMsvh9jnRmkbnQTnlwvSRawCeJ6r0 XLAzRWBJerVjsqsyKCjYJq4= =YhIH -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message