From owner-freebsd-small Thu Sep 7 23:53:16 2000 Delivered-To: freebsd-small@freebsd.org Received: from info.iet.unipi.it (info.iet.unipi.it [131.114.9.184]) by hub.freebsd.org (Postfix) with ESMTP id 4FF5E37B423 for ; Thu, 7 Sep 2000 23:53:10 -0700 (PDT) Received: (from luigi@localhost) by info.iet.unipi.it (8.9.3/8.9.3) id IAA32356; Fri, 8 Sep 2000 08:54:49 +0200 (CEST) (envelope-from luigi) From: Luigi Rizzo Message-Id: <200009080654.IAA32356@info.iet.unipi.it> Subject: Re: Stateful In-Reply-To: <39B7A867.14388.FD8738@localhost> from Albert Yang at "Sep 7, 2000 02:38:31 pm" To: Albert Yang Date: Fri, 8 Sep 2000 08:54:49 +0200 (CEST) Cc: freebsd-small@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL61 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-small@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > Luigi, > > Is the ipfw on your pico disk stateful? I might give it a try yes it is, -- the image is based on 3.4 plus all the ipfw/dummynet features that are present in 4.1 (so, stateful and WF2Q+). Bridging also works. > tonight. Definitely looks interesting. I need a firewall and nat. er... IF you need NAT, maybe ipfilter is a better option! cheers luigi > I am using a DSL router right now, but I'd like to return it and use > one of my boxes, save me $200. > > I like ipf because of all the ruleset languaging, it's the one that > makes the most sense, and I know that Reed has been doing this for a > while and knows what he is doing. That in no way means that the ipfw > team doesn't. > > Albert > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-small" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-small" in the body of the message