From owner-freebsd-hackers Fri Jun 18 19:29:32 1999 Delivered-To: freebsd-hackers@freebsd.org Received: from firewall.reed.wattle.id.au (darren2.lnk.telstra.net [139.130.53.33]) by hub.freebsd.org (Postfix) with ESMTP id 9DFDB1513E for ; Fri, 18 Jun 1999 19:29:20 -0700 (PDT) (envelope-from darrenr@reed.wattle.id.au) Received: (from root@localhost) by firewall.reed.wattle.id.au (8.9.1/8.8.7) id CAA20353; Sat, 19 Jun 1999 02:29:17 GMT Received: from avalon.reed.wattle.id.au(192.168.1.1) by firewall.reed.wattle.id.au via smap (V1.3) id sma020351; Sat Jun 19 02:28:57 1999 Received: from percival.reed.wattle.id.au. (percival.reed.wattle.id.au [192.168.1.5]) by avalon.reed.wattle.id.au (8.9.0.Beta3/8.9.0.Beta3) with SMTP id MAA11563; Sat, 19 Jun 1999 12:28:56 +1000 (EST) From: Darren Reed Message-Id: <199906190228.MAA11563@avalon.reed.wattle.id.au> Subject: Re: firewalling (Was Re: Introduction) In-Reply-To: from Brian Fundakowski Feldman at "Jun 18, 99 10:04:30 pm" To: green@unixhelp.org (Brian Fundakowski Feldman) Date: Sat, 19 Jun 1999 12:28:55 +1000 (EST) Cc: npp@distortion.dk, ru@ucb.crimea.ua, hackers@FreeBSD.org X-Mailer: ELM [version 2.4ME+ PL37 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In some email I received from Brian Fundakowski Feldman, sie wrote: > How do you feel about (after getting it fixed in -CURRENT) helping with > converting ipfw(8) to just a front-end to ipf? I think it's worth discussing > whether it's actually worth it to rewrite IPFW or just work on improving > ipfilter. (discussion moved to -hackers) I imagine they might be fighting words to some ;) As I see it, if you added hooks for divert to ipfilter in FreeBSD and maybe added the rule number bits (I *know* there are going to be people who'd just die without it) then I can't see why you'd need ipfw. I imagine that would be a hell of a lot less work than bringing the features of ipfilter into ipfw. It'd also be one of those steps forward in compatibility between the various BSDs... Darren To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message