From owner-freebsd-questions@freebsd.org  Fri Dec  9 18:37:30 2016
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id D24F0C6F930
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Fri,  9 Dec 2016 18:37:30 +0000 (UTC)
 (envelope-from freebsd@edvax.de)
Received: from mailrelay14.qsc.de (mailrelay14.qsc.de [212.99.163.154])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "*.antispameurope.com",
 Issuer "TeleSec ServerPass DE-2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 3168ED7F
 for <freebsd-questions@freebsd.org>; Fri,  9 Dec 2016 18:37:29 +0000 (UTC)
 (envelope-from freebsd@edvax.de)
Received: from mx01.qsc.de ([213.148.129.14]) by mailrelay14.qsc.de;
 Fri, 09 Dec 2016 19:37:54 +0100
Received: from r56.edvax.de (port-92-195-28-64.dynamic.qsc.de [92.195.28.64])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mx01.qsc.de (Postfix) with ESMTPS id 31B183CC42;
 Fri,  9 Dec 2016 19:36:17 +0100 (CET)
Received: from r56.edvax.de (localhost [127.0.0.1])
 by r56.edvax.de (8.14.5/8.14.5) with SMTP id uB9IaGlq004979;
 Fri, 9 Dec 2016 19:36:17 +0100 (CET) (envelope-from freebsd@edvax.de)
Date: Fri, 9 Dec 2016 19:36:16 +0100
From: Polytropon <freebsd@edvax.de>
To: Warren Block <wblock@wonkity.com>
Cc: freebsd-questions@freebsd.org
Subject: Re: FreeBSD Firewalls
Message-Id: <20161209193616.63c71b3c.freebsd@edvax.de>
In-Reply-To: <alpine.BSF.2.20.1612090900340.26768@wonkity.com>
References: <5bed7716cd0c9f56e7fe73e86d0cde45.squirrel@webmail.harte-lyne.ca>
 <alpine.BSF.2.20.1612071450340.5616@wonkity.com>
 <CAO+PfDeU+MxPKH_rXT3CzEvieb2nk4BV_6hj4mWuJ=NyhJ0dsg@mail.gmail.com>
 <alpine.BSF.2.20.1612090900340.26768@wonkity.com>
Reply-To: Polytropon <freebsd@edvax.de>
Organization: EDVAX
X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-cloud-security-sender: freebsd@edvax.de
X-cloud-security-recipient: freebsd-questions@freebsd.org
X-cloud-security-Virusscan: CLEAN
X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on
 mailrelay14.qsc.de with CFDFD683427
X-cloud-security-connect: mx01.qsc.de[213.148.129.14], TLS=1, IP=213.148.129.14
X-cloud-security: scantime:.1822
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Dec 2016 18:37:30 -0000

On Fri, 9 Dec 2016 09:03:38 -0700 (MST), Warren Block wrote:
> Personally, I'd rather have a system where the firewalls were 
> modular and did not have to be in the base.  Then we could have only one 
> in base, which would probably be IPFW, and others could be installed 
> from ports.  (Yes, this is non-trivial.)

A situation similar to sendmail or lpr would be nice: A functional
component is included in the base system, but the user can still
choose to install an alternative from ports and use that instead
if he wishes _not_ to use the component supplied with the OS. That
doesn't make it less non-trivial, but more appealing. :-)



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...