From owner-freebsd-stable@FreeBSD.ORG Wed May 21 08:35:28 2014 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id D6B8950D for ; Wed, 21 May 2014 08:35:28 +0000 (UTC) Received: from mail-lb0-x230.google.com (mail-lb0-x230.google.com [IPv6:2a00:1450:4010:c04::230]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5A59A2E48 for ; Wed, 21 May 2014 08:35:28 +0000 (UTC) Received: by mail-lb0-f176.google.com with SMTP id p9so1282034lbv.7 for ; Wed, 21 May 2014 01:35:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=V1eRs0AHAFPeGyvZPegj8aF3LqM31c3VF4bsFe561Zo=; b=zCiTxTjQbeGXrMDbop8KKU2nM6JuLrQFSpEKucvuyoZeO+be7dVl2YjToChN/qVGu2 bKJnSh5llDiuxhIFuUGTD3gtUboxAESTZOrTXSZXbB5JmY5om0awaDBLjjtcdikGvfrL ftYkXuJNUNQEcFW3aBk/oO0lQIDz1S233s8CMRUyqDufJR4mE9OZ5lz+t1NOVtAQJlSN ER/zY+GNW8RL0j6awV4880v7M1M4M1QcMyv24mdNG3uJuGE72WmFfnH2mfin9j53a8+B kPLV09wMjG7c34dR/xKU7vxzXNszMDd7rQa1tWz1MwlFW+ylKyW1c6Ye7B5LU3FiRK5E I0jw== X-Received: by 10.152.4.39 with SMTP id h7mr36863502lah.12.1400661326065; Wed, 21 May 2014 01:35:26 -0700 (PDT) Received: from lazlar.no-ip.biz (109.58.143.164.bredband.tre.se. [109.58.143.164]) by mx.google.com with ESMTPSA id k1sm1163929lbb.9.2014.05.21.01.35.25 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 21 May 2014 01:35:25 -0700 (PDT) Message-ID: <537C654B.1010205@gmail.com> Date: Wed, 21 May 2014 10:35:23 +0200 From: Rolf Nielsen User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: freebsd-stable@freebsd.org Subject: Re: What is your favourite/best firewall on FreeBSD and why? References: <20140520070926.GA92183@The.ie> <4341ADF1-E684-4531-8DD0-10107E097D68@punkt.de> In-Reply-To: X-Enigmail-Version: 1.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 May 2014 08:35:29 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2014-05-21 10:22, Andreas Nilsson wrote: > On Wed, May 21, 2014 at 9:57 AM, Patrick M. Hausen > wrote: > >> Hi, all, >> >> Am 20.05.2014 um 09:09 schrieb Lucius Rizzo >> : >>> Ultimately, outside configuration differences all firewalls >>> are >> essentially >>> serve the same purpose but I wonder what is your favorite and >>> why? If you were to run FreeBSD in production, which of the >>> three would you choose? IPFilter, PF or IPFW? >> >> IPFW since it was first introduced. It's the standard one, works, >> and I don't miss anything. >> >> Kind regards Patrick >> > > IPFW for me as well. > > pf has nice features, but has a tendency to crash if one enables > things like vimage. > > I haven't tried IPFilter in FreeBSD, I only tried it on > opensolaris. > > Best regards Andreas IPFW for me too. It was what was availabe when I first started using a firewall, and it does what I want, so I see no reason to switch. Rolf -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (FreeBSD) iQIcBAEBAgAGBQJTfGVKAAoJEB1OKfQ0M8TgVF0QANBFld1gXC3fTa3fYGz+rfpD wy40AzEHLlxOgNMzI515CVG+PEyfK0nsktXTehp3ORxCHICONMZLMLq5aKLgCv5D IiOzsbfqY865ku5CG9GiLh757l5erZjlY1SQ5IStwwKhP9aS9f3tUITP4SQc5z7Q NA7tcuLZNqhtVvxKBcSzpePWQPYfcdOTdrMuwqc0pjvORZPRExJ0ttlmGELarF4Z J4O3OZCikJCn/H9+yHjretuv4R80JXBjwQxZUyZPE8lZiB/eHkJmBsCer7K8dByK bANlJqni1otXr4HAy8ReiZ0YY6aPAfAKKo5fhcS5+CrE08nn+nOqtVeB5X2lLrWY koaA++UtgUqS9//UoFo74h/Tmo7L6JWLwp44hSEegO18HlS1dTiMMW+gBa00lc8W DrtYkLAterhFtjCap5mg1tRLX4ZpBh/zE/jRzjZCIenxXVTvuh1ZXS6qq46l1qST iH3O7ZklnRi8soajfrOJgpP2/YcEFOtbUF/rQel958KImljKvSYpX1wLSyYuWP7v 6BEVcJ/0E4ndXdnz6R3tYa5DidoKUkgs5UhrMKTgoHiX4aTe6+aY3jT9QRDGNibK bWgB7bFYMCIGet9DE5dyXhJ9eVo96qTfbWirK/uzP1xo7IXm+n40gbvZMA3kRTHJ IPhaFJgfn/OVeoFAlBKK =7d70 -----END PGP SIGNATURE-----