Date: Wed, 21 Jan 2004 17:38:36 +0100 From: Max Laier <max@love2party.net> To: Art Mason <amason@rackspace.com>, "Freebsd-Net@Freebsd. Org" <freebsd-net@freebsd.org> Subject: Re: [Freebsd-net] PF installation on 5.2-RELEASE Message-ID: <200401211738.36532.max@love2party.net> In-Reply-To: <1074700702.32768.14.camel@mizar.rackspace.com> References: <20040121152028.275D52B4D82@redqueen.elvandar.org> <1074700702.32768.14.camel@mizar.rackspace.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wednesday 21 January 2004 16:58, Art Mason wrote: > Yes, indeed, many thanks for the quick response. I had read through > the makefile, but wasn't sure if there were any additional settings > that I should take into consideration. On that note, does anyone have > any experience running PF under 5.2-RELEASE in a production > environment, especially in conjunction w/ ALTQ? I'm just curious, > because I've really taken a liking to PF under OpenBSD and really like > the ALTQ integration, especially in regards to upstream traffic > shaping. Does anyone have any experience with such implementations > under 5.2-RELEASE. > If you will use pf on a dail-up line, which gets a dynamic IP via dhcp or similar means, or if you are _very_ concerned about secuirty, you might want to take a look at the "patches" directory (cd /usr/ports/security/pf; make patch; cd work/pf_freebsd_2.02/patches/; less README) to learn about additonal tweaks ("(if_name)" syntax, and bpf security). pf alone has proven stable on a large number of FreeBSD installations (SMP, UP, 64bit ...) among them very busy sites. ALTQ lacks real-life tests for some of the "supported" NICs (as none of the ALTQ patchset developers has access to a big testlab). fxp, rl, tun and dc are well tested (by either Adrian, Pyun or myself) ... if you have another card reports are _very_ welcome! Just write a mail and we will spam you with patchsets until it works ;) -- Best regards, | max@love2party.net Max Laier | ICQ #67774661 http://pf4freebsd.love2party.net/ | mlaier@EFnet
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200401211738.36532.max>