Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 21 Oct 2002 06:32:50 +0200
From:      Roman Neuhauser <neuhauser@bellavista.cz>
To:        freebsd-reply@akruijff.dds.nl
Cc:        Redmond Militante <r-militante@northwestern.edu>, freebsd-questions@freebsd.org
Subject:   Re: favorite security software
Message-ID:  <20021021043250.GE586@freepuppy.bellavista.cz>
In-Reply-To: <18415058332.20021019020210@dds.nl>
References:  <20021018234041.GA28868@darkpossum> <18415058332.20021019020210@dds.nl>

next in thread | previous in thread | raw e-mail | index | archive | help
# freebsd@akruijff.dds.nl / 2002-10-19 02:02:10 +0200:
> Saturday, October 19, 2002, 1:40:42 AM, you wrote:
> RM> do people have any favorite security software that they always run in addition to ipfw or ipfilter?
>
> My favorite firewall is ipfilter. Mainly because it doesn't run in
> userland like ipfw does. 

    hrmm, this is nonsense. ipfw sits in kernel of course. what runs in
    userland is its companion, natd(8). if you don't nat you don't need
    to care. if you don't nat on a very slow/loaded box, that is.

    as has been said on the list, the fact that natd is a userland
    process has its ups as well: a bug in natd won't panic your gateway
    (i gathered from the lists that there used to be a bug in ipnat that
    caused just that).

    n.b.: i'm an ipfilter user.

-- 
If you cc me or take the list(s) out completely I'll most likely
ignore your message.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021021043250.GE586>