Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 1 Apr 2001 21:57:51 -0700
From:      "Hervey Wilson" <herveyw@dynamic-cast.com>
To:        "FreeBSD Questions" <freebsd-questions@FreeBSD.ORG>
Subject:   ipfw vs. ipfilter
Message-ID:  <00db01c0bb31$78966e10$0101a8c0@chillipepper>

next in thread | raw e-mail | index | archive | help
Being new to FreeBSD and needing a firewall and NAT, I'm presently using
ipfw and natd. I've also been looking at some of the documentation for
ipfilter and ipnat (in particular the ipf-howto @ obfuscation.org). Having
been through the documentation for both it's not clear to me whether I
should consider switching over to ipfilter. One specific requirement I have
is that the NAT services can support the GRE protocol needed for MS-PPTP
tunneling - this works nicely right now with natd.

Does anyone have any comments on this topic that might shed some light on
which method is best under different circumstances ? Is ipfilter the "next
generation" packet filter technology like ipchains (now iptables) was on
Linux ? Or are they just different ways of achieving the same thing ?

Thanks in advance,
Hervey.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?00db01c0bb31$78966e10$0101a8c0>