From owner-freebsd-pf@FreeBSD.ORG Tue Jan 23 22:23:33 2007 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 7019D16A400 for ; Tue, 23 Jan 2007 22:23:33 +0000 (UTC) (envelope-from turgeon.martin@gmail.com) Received: from nz-out-0506.google.com (nz-out-0506.google.com [64.233.162.229]) by mx1.freebsd.org (Postfix) with ESMTP id 373E013C47E for ; Tue, 23 Jan 2007 22:23:33 +0000 (UTC) (envelope-from turgeon.martin@gmail.com) Received: by nz-out-0506.google.com with SMTP id i11so897501nzh for ; Tue, 23 Jan 2007 14:23:32 -0800 (PST) DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:user-agent:mime-version:to:subject:content-type:content-transfer-encoding; b=krsiKOybMOuOORT92Vp4LLTHdyyXn5t5BGzk7n7ZotwUmDvBWxAcNi6hRV8V3TCpTsxPO9SC21fzJMr8fbzgs5PkK7/uj0glr+FFfOPNKY2aIVIhmZbCeL+/mQ8ell+pt6ebFF8bCYYFxu+7KPpACHRcdLa037K+sYEI7woFTI0= Received: by 10.65.154.10 with SMTP id g10mr10621805qbo.1169589436085; Tue, 23 Jan 2007 13:57:16 -0800 (PST) Received: from ?192.168.0.200? ( [69.70.75.162]) by mx.google.com with ESMTP id 1sm9704882qbh.2007.01.23.13.57.15; Tue, 23 Jan 2007 13:57:15 -0800 (PST) Message-ID: <45B684BD.8090706@gmail.com> Date: Tue, 23 Jan 2007 16:57:17 -0500 From: Martin Turgeon User-Agent: Thunderbird 1.5.0.9 (Windows/20061207) MIME-Version: 1.0 To: freebsd-pf@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: PF in kernel or as a module X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jan 2007 22:23:33 -0000 Hi all! I would like to start a debate on this subject. Which method of enabling PF is the more secure (buffer overflow for example), the fastest, the most stable, etc. I searched the web for some info but without result. So I would like to know your opinion on the pros and cons of each method. Thank you, Martin Turgeon