From owner-freebsd-stable@FreeBSD.ORG Wed May 21 08:22:45 2014 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 79B1F991 for ; Wed, 21 May 2014 08:22:45 +0000 (UTC) Received: from mail-oa0-x235.google.com (mail-oa0-x235.google.com [IPv6:2607:f8b0:4003:c02::235]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 434442C47 for ; Wed, 21 May 2014 08:22:45 +0000 (UTC) Received: by mail-oa0-f53.google.com with SMTP id m1so1887495oag.40 for ; Wed, 21 May 2014 01:22:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=H0LFtJuJrwmpwjBmEg3hmmM3yE7jHCP5CJmga7ND0ZA=; b=qXG2R1f8gUaXyg0ZcRRsRTNulQCfzVi+IonjXK2IIosijmh0jkTfQ5/5NV4pio2twk /M9KXK3sY9RM27tUbmYQAufoPqlKVCRX4fVbn58DHm4SFhMGqAO52qu6iTOFVMspnFl8 65u2VWLi33VkvP1T7GiykiEcpmMRaKdr3xvnPJgYAYD8fBHZhejTtVhMwtTHgu2fLpOd D6ndEhIYovnUgy+eCgaVX3IluW3A/ko3YCld1uGBWJEnYx8croVtrbwzIakIOyLp3YGY qVe/nttKIYjM2QmRCHeIqSaR/tPhyKeoBC4yHPEb3luLArBiYWkM/j/MLrUM+5EVqDa2 yHWA== MIME-Version: 1.0 X-Received: by 10.60.62.9 with SMTP id u9mr1366177oer.81.1400660564626; Wed, 21 May 2014 01:22:44 -0700 (PDT) Received: by 10.76.170.39 with HTTP; Wed, 21 May 2014 01:22:44 -0700 (PDT) In-Reply-To: <4341ADF1-E684-4531-8DD0-10107E097D68@punkt.de> References: <20140520070926.GA92183@The.ie> <4341ADF1-E684-4531-8DD0-10107E097D68@punkt.de> Date: Wed, 21 May 2014 10:22:44 +0200 Message-ID: Subject: Re: What is your favourite/best firewall on FreeBSD and why? From: Andreas Nilsson To: "Patrick M. Hausen" Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18 Cc: FreeBSD Stable Mailing List , Lucius Rizzo X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 May 2014 08:22:45 -0000 On Wed, May 21, 2014 at 9:57 AM, Patrick M. Hausen wrote: > Hi, all, > > Am 20.05.2014 um 09:09 schrieb Lucius Rizzo : > > Ultimately, outside configuration differences all firewalls are > essentially > > serve the same purpose but I wonder what is your favorite and why? If > > you were to run FreeBSD in production, which of the three would you > > choose? IPFilter, PF or IPFW? > > IPFW since it was first introduced. It's the standard one, works, and I > don't miss anything. > > Kind regards > Patrick > IPFW for me as well. pf has nice features, but has a tendency to crash if one enables things like vimage. I haven't tried IPFilter in FreeBSD, I only tried it on opensolaris. Best regards Andreas