From owner-freebsd-questions@FreeBSD.ORG Fri May 2 08:22:09 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DDB9537B401 for ; Fri, 2 May 2003 08:22:09 -0700 (PDT) Received: from thalia.otenet.gr (thalia.otenet.gr [195.170.0.8]) by mx1.FreeBSD.org (Postfix) with ESMTP id 78A3D43FE0 for ; Fri, 2 May 2003 08:22:04 -0700 (PDT) (envelope-from keramida@ceid.upatras.gr) Received: from gothmog.gr (patr530-a056.otenet.gr [212.205.215.56]) by thalia.otenet.gr (8.12.9/8.12.9) with ESMTP id h42FLvmX023957 for ; Fri, 2 May 2003 18:22:01 +0300 (EEST) Received: from gothmog.gr (gothmog [127.0.0.1]) by gothmog.gr (8.12.9/8.12.9) with ESMTP id h42FLtJc000882 for ; Fri, 2 May 2003 18:21:55 +0300 (EEST) (envelope-from keramida@ceid.upatras.gr) Received: (from giorgos@localhost) by gothmog.gr (8.12.9/8.12.9/Submit) id h42Ekvkn019743; Fri, 2 May 2003 17:46:57 +0300 (EEST) (envelope-from keramida@ceid.upatras.gr) Date: Fri, 2 May 2003 17:46:57 +0300 From: Giorgos Keramidas To: Joe Sotham Message-ID: <20030502144657.GC98449@gothmog.gr> References: <1868.192.168.0.1.1051459162.squirrel@sigfried> <20030501130532.GB62775@gothmog.gr> <1402.192.168.0.1.1051855859.squirrel@sigfried> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1402.192.168.0.1.1051855859.squirrel@sigfried> cc: freebsd-questions@freebsd.org Subject: Re: [OT] ipfw or ipfilter ... Re: modifying ipfw rules to accompany dnscache install X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 May 2003 15:22:10 -0000 On 2003-05-01 23:10, Joe Sotham wrote: >> I'm using ipfilter now, so I haven't run any recent tests with this >> ruleset, but the rule shown above used to work great. > > First, Giorgos, thanks for the reply. > > Now I have been pondering the issue of using ipfw or ipfilter but > haven't seen much discussion in the list. Is there an issue at all or > personal preference to which to use. I like both. I have used both and feel comfortable with both. They both have advantages and disadvantages, so I'll refrain from a long and pointless description of pros and cons. There are a lot of messages in the list archives that address this topic :) If you're asking why I said that I'm using ipfilter now, it's because of an earlier attempt to read the source code of ipfilter for educational purposes. Setting things to use ipfilter was an easy way to test and verify that my understanding of the source was correct. - Giorgos