Date: Tue, 29 Apr 2008 09:51:29 -0700 From: perikillo <perikillo@gmail.com> To: "FreeBSD Mailing List" <freebsd-questions@freebsd.org> Subject: Re: Firewalls Message-ID: <51d7a5160804290951p43cd3bbfw91c968bf5247c6ba@mail.gmail.com> In-Reply-To: <48162A6E.8050607@cran.org.uk> References: <05B6619C-9771-41EA-B43E-05DB40CB3258@lafn.org> <48162A6E.8050607@cran.org.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Apr 28, 2008 at 12:50 PM, Bruce Cran <bruce@cran.org.uk> wrote: > Doug Hardie wrote: > > > FreeBSD supports 3 firewalls: IPF, IPFW, and PF. Some time ago > > (perhaps years) I seem to recall some discussion that one or more of those > > was better maintained and higher quality than the others. I don't see any > > indications of this in the handbook. Several years ago I needed to do > > traffic shaping and used IPFW with dummynet. It worked but the need > > eventually went away. More recently I needed to incorporate spamd which > > defaults to PF so I used that. However, now I am back to needing traffic > > shaping again. I suspect trying to use both PF and IPFW simultaneously will > > not be a good approach. In addition, there now are instructions for using > > spamd with IPFW so it appears that either PF or IPFW will do what I need. > > Is there any additional information available to assist in selecting > > between those? Thanks. > > > > As I understand it pf is often found to be easiest to use and has lots of > features like altq and os fingerprinting but is quite a bit slower than > ipfw. > > -- > Bruce > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" > Reading this post, i have some doubt, how is IPFW support for VoIP packets, can do traffic shaping?, i read that PF can do that, I'm right? Thanks!!!
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?51d7a5160804290951p43cd3bbfw91c968bf5247c6ba>