Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 Nov 2003 17:05:35 -0800
From:      "Crist J. Clark" <cristjc@comcast.net>
To:        Max Laier <max@love2party.net>
Cc:        Vahric MUHTARYAN <vahric@doruk.net.tr>
Subject:   Re: Which Firewall --> ipfw or iptable or ipsec
Message-ID:  <20031119010535.GC10828@blossom.cjclark.org>
In-Reply-To: <671461625.20031118142929@love2party.net>
References:  <030101c3ad34$79ad48d0$110d3ad4@VAHOXP> <671461625.20031118142929@love2party.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Nov 18, 2003 at 02:29:29PM +0100, Max Laier wrote:
[snip]

> 2) IPFILTER (a bit dated but with quite a few FAQs around)
> 3) PF: security/pf (from ports. The OpenBSD FAQ is a good starting
>    point to learn about it's capabilities:
>    http://www.openbsd.org/faq/pf/index.html)
> 
> For case 2) & 3) you'll need "option PFIL_HOOKS" in your kernel, which
> is - sadly enough - not (yet) in GENERIC.

You do not need PFIL_HOOKS for the 4_RELENG branch (FreeBSD
4.x). Starting with 5.2 you will not need it in the 5.x branch
either.
-- 
Crist J. Clark                     |     cjclark@alum.mit.edu
                                   |     cjclark@jhu.edu
http://people.freebsd.org/~cjc/    |     cjc@freebsd.org



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031119010535.GC10828>