From owner-freebsd-questions@FreeBSD.ORG  Wed Feb  2 21:07:38 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 75F6916A4CE
	for <freebsd-questions@freebsd.org>;
	Wed,  2 Feb 2005 21:07:38 +0000 (GMT)
Received: from sccrmhc13.comcast.net (sccrmhc13.comcast.net [204.127.202.64])
	by mx1.FreeBSD.org (Postfix) with ESMTP id F18D143D39
	for <freebsd-questions@freebsd.org>;
	Wed,  2 Feb 2005 21:07:37 +0000 (GMT)
	(envelope-from tbonius@comcast.net)
Received: from ostros (c-24-18-102-54.client.comcast.net[24.18.102.54])
          by comcast.net (sccrmhc13) with SMTP
          id <20050202210734016004dk61e>; Wed, 2 Feb 2005 21:07:34 +0000
Message-ID: <001801c5096b$6606a7b0$c900a8c0@ostros>
From: "Thomas Foster" <tbonius@comcast.net>
To: "Andy Firman" <andy@firman.us>, <freebsd-questions@freebsd.org>
References: <20050202180022.GA20636@akroteq.com>
Date: Wed, 2 Feb 2005 13:08:51 -0800
MIME-Version: 1.0
Content-Type: text/plain;
	format=flowed;
	charset="iso-8859-1";
	reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Subject: Re: IPF, IPFW, or IPFILTER?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Feb 2005 21:07:38 -0000

I dont think there really is a more commonly used one.  It kind of moves in 
cycles.  There used to be quite a few posts about IPfilter.. its quick, 
easy, and secure.  Then there was a buzz around IPFW.. its a bit more 
cumbersome.. but also very secure.. and along with dummynet.. there are many 
possibilities.  The latest buzz is PF, especially now that ALTQ options are 
here in the kernel..

check out a couple of articles and see which one works best for you:

http://www.section6.net/help.php

Hope this helps

T
----- Original Message ----- 
From: "Andy Firman" <andy@firman.us>
To: <freebsd-questions@freebsd.org>
Sent: Wednesday, February 02, 2005 10:00 AM
Subject: IPF, IPFW, or IPFILTER?


>
> The author of the FreeBSD handboodk prefers IPF (ipfilter) because
> its stateful rules are much less complicated....
> The author of "The Complete BSD" talks about IPFW (ipfirewall)
> only.  People on this list talk of PF (packetfilter) quite a bit.
>
> What is the most "commonly used" firewall for a web/email host
> server with a static IP address connected directly to the Internet?
> (protecting itself)
>
> What is the most "commonly used" firewall for a gateway/router/
> network firewall server in front of several other boxes?
> (protecting others and itself)
>
> Thanks,
> Andy
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe@freebsd.org"
>