Date: Fri, 9 Dec 2016 09:03:38 -0700 (MST) From: Warren Block <wblock@wonkity.com> To: David Demelier <demelier.david@gmail.com> Cc: freebsd-questions@freebsd.org, byrnejb@harte-lyne.ca Subject: Re: FreeBSD Firewalls Message-ID: <alpine.BSF.2.20.1612090900340.26768@wonkity.com> In-Reply-To: <CAO%2BPfDeU%2BMxPKH_rXT3CzEvieb2nk4BV_6hj4mWuJ=NyhJ0dsg@mail.gmail.com> References: <5bed7716cd0c9f56e7fe73e86d0cde45.squirrel@webmail.harte-lyne.ca> <alpine.BSF.2.20.1612071450340.5616@wonkity.com> <CAO%2BPfDeU%2BMxPKH_rXT3CzEvieb2nk4BV_6hj4mWuJ=NyhJ0dsg@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 9 Dec 2016, David Demelier wrote: > Either PF or IPFW, depending on who you ask. Or, if you work for Juniper, IPF. > > I used IPFW for many years, now have used PF for many years. > > Which of them, if any, have FW for dummies like tools/guides? > > > Peter Hansteen has at least one famous book on PF. There are example IPFW firewalls in /etc/rc.firewall, too. > > > IPFW, IPF, PF. Three firewalls in only one system. I hope one day there will be a consensus to keep only one. IPF was almost removed a while back, but got a reprieve at the last minute. Personally, I'd rather have a system where the firewalls were modular and did not have to be in the base. Then we could have only one in base, which would probably be IPFW, and others could be installed from ports. (Yes, this is non-trivial.) From owner-freebsd-questions@freebsd.org Fri Dec 9 17:07:25 2016 Return-Path: <owner-freebsd-questions@freebsd.org> Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 00731C6E264 for <freebsd-questions@mailman.ysv.freebsd.org>; Fri, 9 Dec 2016 17:07:25 +0000 (UTC) (envelope-from inform@kanem.ru) Received: from mailman.ysv.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id E274114C5 for <freebsd-questions@freebsd.org>; Fri, 9 Dec 2016 17:07:24 +0000 (UTC) (envelope-from inform@kanem.ru) Received: by mailman.ysv.freebsd.org (Postfix) id DE3C9C6E263; Fri, 9 Dec 2016 17:07:24 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DD6C9C6E261 for <questions@mailman.ysv.freebsd.org>; Fri, 9 Dec 2016 17:07:24 +0000 (UTC) (envelope-from inform@kanem.ru) Received: from mail.kanem.ru (mail.kanem.ru [109.120.151.28]) by mx1.freebsd.org (Postfix) with SMTP id 66E1814C4 for <questions@freebsd.org>; Fri, 9 Dec 2016 17:07:22 +0000 (UTC) (envelope-from inform@kanem.ru) Message-ID: <57ADF3AD5480B2419D98D161457B3C76@kanem.ru> From: =?windows-1251?B?weXw8uA=?= <inform@kanem.ru> To: <questions@freebsd.org> Subject: =?windows-1251?B?xO7i5fD/6fLlIO/w7vTl8fHo7u3g6+DsISA=?= Date: Fri, 9 Dec 2016 22:07:15 +0500 MIME-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; d=kanem.ru; s=mail; c=relaxed/relaxed; t=1481303235; h=message-id:from:to:subject:date:mime-version; bh=q0lGY39Z+7sniVipwhrtA6ogmr1Lu3kbMOCxPv/OeEA=; b=h3iL+C6O2cv1e7U686PMEY4tC9SPCTlAlXP/ntriXzd6ryi3yqfqpb1QL5u6DU mywUUw+d/2NCLMDbRsPOXbqqQ4ouLVKJOif3Dy0bUK7MNthF18S6oSZH3WBN6xUa BHADBJDL83gvQtr41q+fVdH7a4B7GPGhMd97Au9Np0ito= Content-Type: text/plain; charset="windows-1251" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions <freebsd-questions.freebsd.org> List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe> List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>; List-Post: <mailto:freebsd-questions@freebsd.org> List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help> List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, <mailto:freebsd-questions-request@freebsd.org?subject=subscribe> X-List-Received-Date: Fri, 09 Dec 2016 17:07:25 -0000 =D0=E0=F1=F1=FB=EB=EA=E0 =EF=EE =ED=E0=F8=E5=E9 =E1=E0=E7=E5 =CF=EE=E4=F0=EE=E1=ED=EE =E2=EE =E2=EB=EE=E6=E5=ED=E8=E5
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.20.1612090900340.26768>