Date: Sat, 19 Jun 1999 18:47:22 -0700 (PDT) From: Julian Elischer <julian@whistle.com> To: "Brian F. Feldman" <green@unixhelp.org> Cc: Doug Rabson <dfr@nlsystems.com>, Dag-Erling Smorgrav <des@flood.ping.uio.no>, Ruslan Ermilov <ru@ucb.crimea.ua>, ugen@xonix.com, hackers@FreeBSD.ORG, luigi@FreeBSD.ORG Subject: Re: Introduction Message-ID: <Pine.BSF.3.95.990619184705.13715B-100000@current1.whistle.com> In-Reply-To: <Pine.BSF.4.10.9906191126500.916-100000@janus.syracuse.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 19 Jun 1999, Brian F. Feldman wrote: > On Sat, 19 Jun 1999, Doug Rabson wrote: > > > On 19 Jun 1999, Dag-Erling Smorgrav wrote: > > > > > "Brian F. Feldman" <green@unixhelp.org> writes: > > > > It might be worth (discussion of) making ipfilter the firewall of > > > > choice for 4.0. There would of course be rule conversion > > > > scripts/programs (ipfw->ipf(5)), and ipfilter would be converted to > > > > a KLD, cruft removed (I'm going to work on these), and ipfilter KLD > > > > support (currently options IPFILTER_LKM) made a non-option. It seems > > > > that our pretty proprietary ipfw is no longer a good idea. > > > > > > If ipfilter can to everything ipfw can (judging from ipf(5), it can) > > > and you even manage to keep an ipfw(8) command around so those who > > > want kan keep using the old syntax still can, then I for one have no > > > objections. > > > > > > Rewriting ipfw rules to ipfilter rules on the fly should be trivial; a > > > simple Perl script should be sufficient. > > > > Does ipfilter support divert sockets? > > It still needs: > divert sockets > Luigi's stuff (dummynet and bridging) > my stuff fwd stuff? > > > > > -- > > Doug Rabson Mail: dfr@nlsystems.com > > Nonlinear Systems Ltd. Phone: +44 181 442 9037 > > > > > > > > Brian Fundakowski Feldman _ __ ___ ____ ___ ___ ___ > green@FreeBSD.org _ __ ___ | _ ) __| \ > FreeBSD: The Power to Serve! _ __ | _ \._ \ |) | > http://www.FreeBSD.org/ _ |___/___/___/ > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-hackers" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95.990619184705.13715B-100000>