Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Feb 2007 20:13:51 +0200
From:      Sergej Kandyla <_paix@rambler.ru>
To:        Vladimir Kapustin <msgs_for_me@mail.ru>
Cc:        freebsd-isp@FreeBSD.ORG
Subject:   Re: How to optimize ruleset for gateway?
Message-ID:  <45D4A2DF.1050100@rambler.ru>
In-Reply-To: <1024498861.20070214183625@mail.ru>
References:  <1024498861.20070214183625@mail.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
Vladimir Kapustin wrote:

>I don't think this is a good idea, and now I choosing some other
>variants of optimization, such as:
>
>1. Configure PF for major rules and SPAM filtering and IPFW+DUMMYNET for
>queueing. I've read somewhere, that IPFW-shaper supports tables the way I
>need. I'm afraid that two firewalls should significantly decrease perfomance.
>
>  
>
I think you should configure PF with PF-ALTQ

Some PF resources :
http://www.openbsd.org/faq/pf/    
http://www.benzedrine.cx/ackpri.html
Examples in /usr/share/examples/pf/  could  be useful too.

>2. Configure only IPFW. But this means that I have to read full documentation
>about it, and find the way to protect the Internet from SPAM going from my 
>local NET.
>
>
>Could somebody give me some advice what way to go?
>
>  
>




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?45D4A2DF.1050100>