From owner-freebsd-questions Thu May 2 14: 1:43 2002 Delivered-To: freebsd-questions@freebsd.org Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108]) by hub.freebsd.org (Postfix) with ESMTP id 806E837B41B for ; Thu, 2 May 2002 14:01:37 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by cactus.fi.uba.ar (8.11.6/8.11.6) with ESMTP id g42KwrL97415; Thu, 2 May 2002 17:58:54 -0300 (ART) (envelope-from fgleiser@cactus.fi.uba.ar) Date: Thu, 2 May 2002 17:58:53 -0300 (ART) From: Fernando Gleiser X-X-Sender: To: Walid Nehme Cc: Subject: Re: ipfw and ipfilter In-Reply-To: <20020502182226.48214.qmail@web10007.mail.yahoo.com> Message-ID: <20020502175306.C97354-100000@localhost> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Thu, 2 May 2002, Walid Nehme wrote: > what is better, ipfw or ipfilter, Define better. They're both very good packet filters. There are some things you can do in ipf which you can't do in ipfw and vice versa. > and which is newer? They're both actively maintained. So, I think neither is newer. > which is faster to nat with? I haven't done any scientific tests to prove it, but I supose ipnat is faster than natd, because ipnat runs in kernel mode and natd runs in user space, so you need to copy the packets from kernel to userspace and back. You need to try both and use the one which fits your needs better. Fer > > ===== > Regards. > Walid Nehme > ICQ:5855336 > MSN:nastylid@hotmail.com > my homepage http://gayana.kharkov.com/Start.html > > __________________________________________________ > Do You Yahoo!? > Yahoo! Health - your guide to health and wellness > http://health.yahoo.com > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message