From owner-freebsd-questions@FreeBSD.ORG Sat Nov 24 18:40:19 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 92ED216A418 for ; Sat, 24 Nov 2007 18:40:19 +0000 (UTC) (envelope-from fbsd06+QR=97ba127b@mlists.homeunix.com) Received: from turtle-out.mxes.net (turtle-out.mxes.net [216.86.168.191]) by mx1.freebsd.org (Postfix) with ESMTP id 6F05A13C458 for ; Sat, 24 Nov 2007 18:40:19 +0000 (UTC) (envelope-from fbsd06+QR=97ba127b@mlists.homeunix.com) Received: from mxout-04.mxes.net (mxout-04.mxes.net [216.86.168.179]) by turtle-in.mxes.net (Postfix) with ESMTP id 7022B164116 for ; Sat, 24 Nov 2007 13:09:57 -0500 (EST) Received: from gumby.homeunix.com. (unknown [87.81.140.128]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTP id EAC94D0501 for ; Sat, 24 Nov 2007 13:09:55 -0500 (EST) Date: Sat, 24 Nov 2007 18:09:52 +0000 From: RW To: freebsd-questions@freebsd.org Message-ID: <20071124180952.46f84f63@gumby.homeunix.com.> In-Reply-To: <2949641c0711240741i24ef2a1cj46c2ba0f5a33fd38@mail.gmail.com> References: <2949641c0711240434m71fbbc0fj73c7af80f88bad6d@mail.gmail.com> <2949641c0711240741i24ef2a1cj46c2ba0f5a33fd38@mail.gmail.com> X-Mailer: Claws Mail 3.0.2 (GTK+ 2.12.1; i386-portbld-freebsd7.0) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: Re: routing problem X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Nov 2007 18:40:19 -0000 On Sat, 24 Nov 2007 13:41:51 -0200 "Alaor Barroso de Carvalho Neto" wrote: > 2007/11/24, Ian Smith : > > > > No I didn't mean that; use your own favourite packet filter, any of > > them can handle what you've described. Bill suggested pf - lots of > > people seem to like it a lot - and I use ipfw because I (mostly) > > know how to. > > > I always had linux servers, so I'm very familiar with iptables, I > don't have a favorite BSD firewall yet, so that's why I'm asking. I > choose ipfilter because I liked the tutorial in the FreeBSD handbook, > but I don't know any features of the others, I even don't know > ipfilter yet. IPFilter was OpenBSD's old firewall, but because of its restrictive licence PF was developed and IPFilter was dropped from OpenBSD. The two firewalls use a very similar syntax. Unless you have a good reason to use IPFilter, it's probably better to start with PF, the documentation on the OpenBSD site is pretty good.