Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 27 Nov 2020 01:16:37 -0800
From:      Chris <bsd-lists@bsdforge.com>
To:        freebsd-current@freebsd.org
Subject:   Re: firewall choice
Message-ID:  <2653d213518332070e63e2c8e6ec7a4f@bsdforge.com>
In-Reply-To: <X8C43AprLKhr3xxy@rpi4.local>
References:  <X8C43AprLKhr3xxy@rpi4.local>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2020-11-27 00:29, tech-lists wrote:
> Hi,
> 
> What's the "best" [1] choice for firewalling these days, in the list's 
> opinion?

I can't speak for the whole list. ;-)
But in my opinion with tables totaling over 150 million IPs. I'm casting a 
vote
for pf(4). It's wildly easy on resources and as fast and flexible as I could 
ever
hope to want. Started using it years ago, and never looked back. :-)

> 
> There's pf, ipf and ipfw. Which is the one being most recently 
> developed/updated?
> I'm used to using pf, have done for over a decade. But OpenBSD's pf has 
> diverged a
> lot more from when it first came across. There seems to be a lot more 
> options.
> Is FreeBSD's pf being actively developed still?

Yes. It is actively developed.
> 
> ipfw seems a lot more syntatically complex than pf. Is it more capable also?
> I know nothing about ipf yet.
> 
> [1] up-to-date, versatile, low overhead, high throughput, IPv6-able,
> traffic shaping/queueing
> 
> thanks,

--Chris



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2653d213518332070e63e2c8e6ec7a4f>