From owner-freebsd-hackers Thu Jan 16 14:48:18 2003 Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A1C9E37B401 for ; Thu, 16 Jan 2003 14:48:17 -0800 (PST) Received: from apollo.backplane.com (apollo.backplane.com [216.240.41.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3036E43E4A for ; Thu, 16 Jan 2003 14:48:17 -0800 (PST) (envelope-from dillon@apollo.backplane.com) Received: from apollo.backplane.com (localhost [127.0.0.1]) by apollo.backplane.com (8.12.6/8.12.6) with ESMTP id h0GMmG0i024607; Thu, 16 Jan 2003 14:48:17 -0800 (PST) (envelope-from dillon@apollo.backplane.com) Received: (from dillon@localhost) by apollo.backplane.com (8.12.6/8.12.6/Submit) id h0GMmGTR024606; Thu, 16 Jan 2003 14:48:16 -0800 (PST) Date: Thu, 16 Jan 2003 14:48:16 -0800 (PST) From: Matthew Dillon Message-Id: <200301162248.h0GMmGTR024606@apollo.backplane.com> To: Josh Brooks Cc: Nate Williams , Subject: Re: FreeBSD firewall for high profile hosts - waste of time ? References: <20030116143937.F38599-100000@mail.econolodgetulsa.com> Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG :per second down its throat, it chokes _hard_. You think that optimizing :my ruleset will change that ? Or does 15K p/s choke any freebsd+ipfw :firewall with 1-200 rules running on it ? : :thanks. Run 'ipfw -v list' on it. -Matt Matthew Dillon To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message