From owner-freebsd-questions@FreeBSD.ORG Tue Apr 29 16:51:30 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2F84A1065672 for ; Tue, 29 Apr 2008 16:51:30 +0000 (UTC) (envelope-from perikillo@gmail.com) Received: from wr-out-0506.google.com (wr-out-0506.google.com [64.233.184.237]) by mx1.freebsd.org (Postfix) with ESMTP id D9E608FC21 for ; Tue, 29 Apr 2008 16:51:29 +0000 (UTC) (envelope-from perikillo@gmail.com) Received: by wr-out-0506.google.com with SMTP id 50so87243wra.13 for ; Tue, 29 Apr 2008 09:51:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; bh=930BCB8n27D5GT7nFsXklTNyfQypuALXz4WY4USB/8c=; b=hhtoaVxNOvEXJ+sZifjM9OsMn30VTUE3jTL65XKvqbX9kM7gp0/kvtciuQhkUHTuqKk2grWUlsQXVVn+e9KOLSYC1M2HhiFvYegzhU05ZuXpmycksz0J5VvESLLxAwRWDdj8QLgLCriGjJF4PB/cC9yiOiqHA/wpcVrHzbMdCoQ= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; b=tuzolo6y4CFDbs8lI3njeOREAYqU77QYb7XvmpIdjixgHNuKTlkSim78MU7ny9AsS61iGxyvbu6F4atBD8WqkrBUwhhuOyyis1fRyu0Iud8wHZ2BPcAPDtC2lN7lg8wFUJNrAei+hEc3d9rT8fe6lmQvH9Qbh+Cq0fTEtSYllIY= Received: by 10.100.106.1 with SMTP id e1mr1859438anc.24.1209487889087; Tue, 29 Apr 2008 09:51:29 -0700 (PDT) Received: by 10.100.208.8 with HTTP; Tue, 29 Apr 2008 09:51:29 -0700 (PDT) Message-ID: <51d7a5160804290951p43cd3bbfw91c968bf5247c6ba@mail.gmail.com> Date: Tue, 29 Apr 2008 09:51:29 -0700 From: perikillo To: "FreeBSD Mailing List" In-Reply-To: <48162A6E.8050607@cran.org.uk> MIME-Version: 1.0 References: <05B6619C-9771-41EA-B43E-05DB40CB3258@lafn.org> <48162A6E.8050607@cran.org.uk> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: Re: Firewalls X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Apr 2008 16:51:30 -0000 On Mon, Apr 28, 2008 at 12:50 PM, Bruce Cran wrote: > Doug Hardie wrote: > > > FreeBSD supports 3 firewalls: IPF, IPFW, and PF. Some time ago > > (perhaps years) I seem to recall some discussion that one or more of those > > was better maintained and higher quality than the others. I don't see any > > indications of this in the handbook. Several years ago I needed to do > > traffic shaping and used IPFW with dummynet. It worked but the need > > eventually went away. More recently I needed to incorporate spamd which > > defaults to PF so I used that. However, now I am back to needing traffic > > shaping again. I suspect trying to use both PF and IPFW simultaneously will > > not be a good approach. In addition, there now are instructions for using > > spamd with IPFW so it appears that either PF or IPFW will do what I need. > > Is there any additional information available to assist in selecting > > between those? Thanks. > > > > As I understand it pf is often found to be easiest to use and has lots of > features like altq and os fingerprinting but is quite a bit slower than > ipfw. > > -- > Bruce > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" > Reading this post, i have some doubt, how is IPFW support for VoIP packets, can do traffic shaping?, i read that PF can do that, I'm right? Thanks!!!