From owner-freebsd-questions  Fri Oct 12  9:17:44 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from po4.wam.umd.edu (po4.wam.umd.edu [128.8.10.166])
	by hub.freebsd.org (Postfix) with ESMTP
	id 87C0137B401; Fri, 12 Oct 2001 09:17:39 -0700 (PDT)
Received: from sun10pg2.wam.umd.edu (IDENT:root@sun10pg2.wam.umd.edu [128.8.73.20])
	by po4.wam.umd.edu (8.9.3/8.9.3) with ESMTP id MAA16303;
	Fri, 12 Oct 2001 12:17:29 -0400 (EDT)
Received: from sun10pg2.wam.umd.edu (IDENT:sendmail@localhost [127.0.0.1])
	by sun10pg2.wam.umd.edu (8.9.3/8.9.3) with SMTP id MAA27513;
	Fri, 12 Oct 2001 12:17:26 -0400 (EDT)
Received: from localhost (culverk@localhost)
	by sun10pg2.wam.umd.edu (8.9.3/8.9.3) with ESMTP id MAA27509;
	Fri, 12 Oct 2001 12:17:25 -0400 (EDT)
X-Authentication-Warning: sun10pg2.wam.umd.edu: culverk owned process doing -bs
Date: Fri, 12 Oct 2001 12:17:25 -0400 (EDT)
From: Kenneth Wayne Culver <culverk@wam.umd.edu>
To: Alfatrion <alfatrion@cybertron.tmfweb.nl>
Cc: "Maine LOA List Admin (Brent Bailey)" <brentb@loa.com>,
	"Hartmann, O." <ohartman@klima.physik.uni-mainz.de>,
	freebsd-stable@FreeBSD.ORG, freebsd-questions@FreeBSD.ORG
Subject: Re: IPFW or IPFILTER?
In-Reply-To: <3BC700CE.8000201@cybertron.tmfweb.nl>
Message-ID: <Pine.GSO.4.21.0110121216390.27495-100000@sun10pg2.wam.umd.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Fri, 12 Oct 2001, Alfatrion wrote:

> Maine LOA List Admin (Brent Bailey) wrote:
> 
> > I tried IPFILTER for awhile ...and it very easy to use...but ..in my opinion
> > it isnt as configurable as IPFW.
> > IPFW is a little more to setup ...but still pretty easy ...and the syntax
> > isnt that hard to understand. Its best feature is its VERY
> > configurable...and as long as you keep logging to a minimum ...it doesnt use
> > alot of resources.
> > Seems its memeory intensive than anything ...running a firewall that is
> > 
> 
> I find IPF more configurable as IPFW. I don't know how to do the 
> folowing in IPFW: pass out quick on tun0 proto tcp from any to any keep 
> state.
> 
IPFW has state keeping, but I don't think it's anywhere as easy to get it
working right.

Ken

> Alex
> 
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message