From owner-freebsd-security  Thu Jul 27 14:29:31 2000
Delivered-To: freebsd-security@freebsd.org
Received: from cairo.anu.edu.au (cairo.anu.edu.au [150.203.224.11])
	by hub.freebsd.org (Postfix) with ESMTP id EF9F037C0BF
	for <freebsd-security@FreeBSD.ORG>; Thu, 27 Jul 2000 14:29:21 -0700 (PDT)
	(envelope-from avalon@cairo.anu.edu.au)
Received: (from avalon@localhost)
	by cairo.anu.edu.au (8.9.3/8.9.3) id HAA04394;
	Fri, 28 Jul 2000 07:29:10 +1000 (EST)
From: Darren Reed <avalon@coombs.anu.edu.au>
Message-Id: <200007272129.HAA04394@cairo.anu.edu.au>
Subject: Re: ipfw vs ipfilter
In-Reply-To: <20000727172410.O51462@jade.chc-chimes.com> from Bill Fumerola at "Jul 27, 0 05:24:10 pm"
To: billf@chimesnet.com (Bill Fumerola)
Date: Fri, 28 Jul 2000 07:29:10 +1000 (EST)
Cc: avalon@coombs.anu.edu.au, kellysm_2k@yahoo.com,
	freebsd-security@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL39 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

In some mail from Bill Fumerola, sie said:
> On Thu, Jul 27, 2000 at 08:28:01PM +1000, Darren Reed wrote:
> 
> > > Is one better than the other? Why? Does it depend on the situation?
> > 
> > ipfw is marginally better for freebsd because it supports all the
> > freebsd specific hacks - not that this buys you anything wonderful
> > in terms of filtering.  ipfilter is generally considered to be the
> > "leading" public domain packet filtering package and I try to ensure
> > it stays that way :-)  For example, the state tracking code in IP Filter
> > is still without an equal.  If you are *serious* about your security
> > you wouldn't use ipfw (by serious I mean not for home/small company
> > use, where physical security is recognised, etc).
> 
> Does ipfilter have rate limiting?

no...and lots of people ask for it too O:-/

personally, it's not clear to me that this belongs there - ALTQ (whatever
that is) often gets cited for doing that sort of work.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message