From owner-freebsd-hackers  Sat Jun 19 18:48:42 1999
Delivered-To: freebsd-hackers@freebsd.org
Received: from alpo.whistle.com (alpo.whistle.com [207.76.204.38])
	by hub.freebsd.org (Postfix) with ESMTP
	id 4E26614BE5; Sat, 19 Jun 1999 18:48:38 -0700 (PDT)
	(envelope-from julian@whistle.com)
Received: from current1.whistle.com (current1.whistle.com [207.76.205.22])
	by alpo.whistle.com (8.9.1a/8.9.1) with SMTP id SAA97735;
	Sat, 19 Jun 1999 18:47:23 -0700 (PDT)
Date: Sat, 19 Jun 1999 18:47:22 -0700 (PDT)
From: Julian Elischer <julian@whistle.com>
To: "Brian F. Feldman" <green@unixhelp.org>
Cc: Doug Rabson <dfr@nlsystems.com>,
	Dag-Erling Smorgrav <des@flood.ping.uio.no>,
	Ruslan Ermilov <ru@ucb.crimea.ua>, ugen@xonix.com,
	hackers@FreeBSD.ORG, luigi@FreeBSD.ORG
Subject: Re: Introduction
In-Reply-To: <Pine.BSF.4.10.9906191126500.916-100000@janus.syracuse.net>
Message-ID: <Pine.BSF.3.95.990619184705.13715B-100000@current1.whistle.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG



On Sat, 19 Jun 1999, Brian F. Feldman wrote:

> On Sat, 19 Jun 1999, Doug Rabson wrote:
> 
> > On 19 Jun 1999, Dag-Erling Smorgrav wrote:
> > 
> > > "Brian F. Feldman" <green@unixhelp.org> writes:
> > > > It might be worth (discussion of) making ipfilter the firewall of
> > > > choice for 4.0. There would of course be rule conversion
> > > > scripts/programs (ipfw->ipf(5)), and ipfilter would be converted to
> > > > a KLD, cruft removed (I'm going to work on these), and ipfilter KLD
> > > > support (currently options IPFILTER_LKM) made a non-option. It seems
> > > > that our pretty proprietary ipfw is no longer a good idea.
> > > 
> > > If ipfilter can to everything ipfw can (judging from ipf(5), it can)
> > > and you even manage to keep an ipfw(8) command around so those who
> > > want kan keep using the old syntax still can, then I for one have no
> > > objections.
> > > 
> > > Rewriting ipfw rules to ipfilter rules on the fly should be trivial; a
> > > simple Perl script should be sufficient.
> > 
> > Does ipfilter support divert sockets?
> 
> It still needs:
> 	divert sockets
> 	Luigi's stuff (dummynet and bridging)
> 	my stuff

fwd stuff?

> 
> > 
> > --
> > Doug Rabson				Mail:  dfr@nlsystems.com
> > Nonlinear Systems Ltd.			Phone: +44 181 442 9037
> > 
> > 
> > 
> 
>  Brian Fundakowski Feldman      _ __ ___ ____  ___ ___ ___  
>  green@FreeBSD.org                   _ __ ___ | _ ) __|   \ 
>      FreeBSD: The Power to Serve!        _ __ | _ \._ \ |) |
>        http://www.FreeBSD.org/              _ |___/___/___/ 
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-hackers" in the body of the message
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message