Date: Sun, 10 Dec 2000 19:45:32 -0600 From: Bill Fumerola <billf@mu.org> To: =?iso-8859-1?Q?R=E9mi_Guyomarch?= <rguyom@pobox.com> Cc: freebsd-stable@freebsd.org Subject: Re: IPFIREWALL or IPFILTER? Message-ID: <20001210194532.H86825@elvis.mu.org> In-Reply-To: <20001210194648.B22773@diabolic-cow.chatgris.net>; from rguyom@pobox.com on Sun, Dec 10, 2000 at 07:46:48PM %2B0100 References: <Pine.BSF.4.21.0012031955270.59659-100000@ipamzlx.physik.uni-mainz.de> <00dd01c05e2e$e42a0700$0b6cffc8@infolink.com.br> <20001209112247.A22773@diabolic-cow.chatgris.net> <20001210111051.F86825@elvis.mu.org> <20001210194648.B22773@diabolic-cow.chatgris.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Dec 10, 2000 at 07:46:48PM +0100, Rémi Guyomarch wrote:
> > Actually, _you're_ wrong. DUMMYNET is very ipfw specific.
>
> Check the mail archives. You can use both firewall packages at the
> same time. If you want to use IPFilter, then simply add it to the
> kernel config, along with IPFIREWALL (ipfw) and DUMMYNET :
>
> options IPFIREWALL
> options IPFIREWALL_DEFAULT_TO_ACCEPT
> options DUMMYNET
> options IPFILTER
> options IPFILTER_LOG
I'm very familiar with ipfw's workings, thanks. The fact remains
that DUMMYNET works with IPFIREWALL only. IPFILTER works in unison
with IPFIREWALL(aka ipfw), but you can't use DUMMYNET pipes with
IPFILTER rules..
--
Bill Fumerola - security yahoo / Yahoo! inc.
- fumerola@yahoo-inc.com / billf@FreeBSD.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001210194532.H86825>