From owner-freebsd-net@FreeBSD.ORG Mon Feb 13 18:18:41 2012 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0902E106564A for ; Mon, 13 Feb 2012 18:18:41 +0000 (UTC) (envelope-from gelraen.ua@gmail.com) Received: from mail-ee0-f54.google.com (mail-ee0-f54.google.com [74.125.83.54]) by mx1.freebsd.org (Postfix) with ESMTP id 8C0128FC08 for ; Mon, 13 Feb 2012 18:18:40 +0000 (UTC) Received: by eekb47 with SMTP id b47so2212695eek.13 for ; Mon, 13 Feb 2012 10:18:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=from:to:subject:date:user-agent:cc:references:in-reply-to :mime-version:content-type:content-transfer-encoding:message-id; bh=xTyFj6xBI5ztvTQlibm+sCQ0YP92dvb8ln0wKRJqIn0=; b=GS1ZqRPlWUQugKmQ1fFkMao+esvDYU2YyV42NhF9hXn6hY02xdfxEWuwBHU9hCwRtW VrZFdsioVE/DGX7GTqUumwNyUvq2O3q6Fgq1FF2akLV/psSCjYhCWr2Ct5uogD3PzwSs rMMfrdBFLWp30FD6zjT9izfnobzfq8L+HyDNs= Received: by 10.14.37.69 with SMTP id x45mr5530574eea.43.1329157119476; Mon, 13 Feb 2012 10:18:39 -0800 (PST) Received: from imax.localnet (21-191-92-178.pool.ukrtel.net. [178.92.191.21]) by mx.google.com with ESMTPS id n56sm63520867eeh.6.2012.02.13.10.18.37 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 13 Feb 2012 10:18:38 -0800 (PST) From: Maxim Ignatenko To: Sami Halabi Date: Mon, 13 Feb 2012 20:18:28 +0200 User-Agent: KMail/1.13.7 (FreeBSD/9.0-PRERELEASE; KDE/4.7.3; i386; ; ) References: In-Reply-To: MIME-Version: 1.0 Content-Type: Text/Plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Message-Id: <201202132018.28798.gelraen.ua@gmail.com> Cc: freebsd-net@freebsd.org Subject: Re: userfw - modular packet filter X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Feb 2012 18:18:41 -0000 On =D0=BF=D0=BD, 13 =D0=BB=D1=8E=D1=82 2012 19:25:42 Sami Halabi wrote: > Hi Maxim, > what are the other advantages on ipfw/pf ? like did you make speed > measures? does packet leave the firewall faster? There was no performance testing yet, I want to implement more functionalit= y=20 first, to compare performance on rulesets more close to real world.