From owner-freebsd-questions Fri Oct 12 18:23: 0 2001 Delivered-To: freebsd-questions@freebsd.org Received: from cody.jharris.com (cody.jharris.com [205.238.128.83]) by hub.freebsd.org (Postfix) with ESMTP id D327737B408 for ; Fri, 12 Oct 2001 18:22:57 -0700 (PDT) Received: from localhost (nick@localhost) by cody.jharris.com (8.11.1/8.9.3) with ESMTP id f9D1MjV07139; Fri, 12 Oct 2001 20:22:45 -0500 (CDT) (envelope-from nick@rogness.net) Date: Fri, 12 Oct 2001 20:22:45 -0500 (CDT) From: Nick Rogness X-Sender: nick@cody.jharris.com To: Kenneth Wayne Culver Cc: Michael Sierchio , Henrik Holmstam , Alfatrion , "Maine LOA List Admin (Brent Bailey)" , "Hartmann, O." , freebsd-questions@FreeBSD.ORG Subject: Re: IPFW or IPFILTER? In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Fri, 12 Oct 2001, Kenneth Wayne Culver wrote: > I suppose another big reason that I started using ipfilter is it's > performance... for me and for what we do through our FreeBSD router > (with gaming through the nat) ipfw + natd just wasn't cutting it. I don't buy that...let's see some numbers people... Since everyone is giving their opinions, I might as well share mine as well. Even though, this conversation does not belong on -stable. Hell, it doesn't even belong on -questions. More like -chat or something. But anyway I'm a big IPFW fan because : 1) it is simple and straightforward. IPFILTER has ipf, ipfstat, ipmon, ipnat...what a head-ache. IPFW has ipfw... 2) IPFW can bring packets out of the Kernel into userland via divert...this can be a very powerful interface that only a few things use that I know of, one of them being natd. Of course, this could be dangerous too. 3) It comes as a kernel module. I'm tired of building a kernel on every machine to enable IPFILTER. 4) Bandwidth control 5) Bridging firewalls Nick Rogness - Keep on Routing in a Free World... "FreeBSD: The Power to Serve!" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message