From owner-freebsd-questions Fri Oct 12 7:41:19 2001 Delivered-To: freebsd-questions@freebsd.org Received: from smtp06.wxs.nl (smtp06.wxs.nl [195.121.6.58]) by hub.freebsd.org (Postfix) with ESMTP id BD72C37B406; Fri, 12 Oct 2001 07:41:13 -0700 (PDT) Received: from cybertron.tmfweb.nl ([213.10.151.186]) by smtp06.wxs.nl (Netscape Messaging Server 4.15) with ESMTP id GL3KRJ00.30D; Fri, 12 Oct 2001 16:40:31 +0200 Message-ID: <3BC700CE.8000201@cybertron.tmfweb.nl> Date: Fri, 12 Oct 2001 16:40:14 +0200 From: Alfatrion User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.2) Gecko/20010726 Netscape6/6.1 X-Accept-Language: en-us MIME-Version: 1.0 To: "Maine LOA List Admin (Brent Bailey)" Cc: "Hartmann, O." , freebsd-stable@freebsd.org, freebsd-questions@freebsd.org Subject: Re: IPFW or IPFILTER? References: <20011012154307.O52936-100000@klima.physik.uni-mainz.de> <003601c15328$db264480$24b4a8c0@pretorian> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Maine LOA List Admin (Brent Bailey) wrote: > I tried IPFILTER for awhile ...and it very easy to use...but ..in my opinion > it isnt as configurable as IPFW. > IPFW is a little more to setup ...but still pretty easy ...and the syntax > isnt that hard to understand. Its best feature is its VERY > configurable...and as long as you keep logging to a minimum ...it doesnt use > alot of resources. > Seems its memeory intensive than anything ...running a firewall that is > I find IPF more configurable as IPFW. I don't know how to do the folowing in IPFW: pass out quick on tun0 proto tcp from any to any keep state. Alex To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message