From owner-freebsd-questions Fri Jun 9 12:25:19 2000 Delivered-To: freebsd-questions@freebsd.org Received: from nisser.com (c1870039.telekabel.chello.nl [212.187.0.39]) by hub.freebsd.org (Postfix) with ESMTP id BE26A37B5C8 for ; Fri, 9 Jun 2000 12:25:13 -0700 (PDT) (envelope-from roelof@nisser.com) Received: from nisser.com (roelof [10.0.0.2]) by nisser.com (8.9.3/8.9.2) with ESMTP id VAA02472; Fri, 9 Jun 2000 21:24:46 +0200 (CEST) (envelope-from roelof@nisser.com) Message-ID: <39414492.ACFF042A@nisser.com> Date: Fri, 09 Jun 2000 21:25:06 +0200 From: Roelof Osinga Organization: eboa - engineering buro Office Automation X-Mailer: Mozilla 4.72 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: Marc Silver Cc: Steve Coles , questions@FreeBSD.ORG Subject: Re: Relative merits of IPFIREWALL and IPFILTER References: <0f4a01bfd229$00605ab0$4c9814ac@volga.TRIPOS.COM> <39413FFB.85A522F6@nisser.com> <20000609211149.C81376@draenor.org> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Marc Silver wrote: > > errr, nope. :) ipfw can handle stateful stuff :) Hey, interesting. I've always gathered that to be the distinguishing feature between them. I mean - from ipf(5) - ipfw doesn't do state keeps information about the flow of a communication session. State can be kept for TCP, UDP, and ICMP packets. this. Ipfw sees each packet as a distinct entity. But if that has changed while I was asleep, so more the better. I'm using ipfw, you see . Roelof -- ----------------------------------------------------------------------- Eboa (ingenieursburo Office Automation) web. http://eboa.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message