From owner-freebsd-stable Sun Dec 10 17:45:41 2000 From owner-freebsd-stable@FreeBSD.ORG Sun Dec 10 17:45:38 2000 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from elvis.mu.org (elvis.mu.org [207.154.226.10]) by hub.freebsd.org (Postfix) with ESMTP id 7B4DE37B404 for ; Sun, 10 Dec 2000 17:45:38 -0800 (PST) Received: by elvis.mu.org (Postfix, from userid 1098) id E8B922B2B1; Sun, 10 Dec 2000 19:45:32 -0600 (CST) Date: Sun, 10 Dec 2000 19:45:32 -0600 From: Bill Fumerola To: =?iso-8859-1?Q?R=E9mi_Guyomarch?= Cc: freebsd-stable@freebsd.org Subject: Re: IPFIREWALL or IPFILTER? Message-ID: <20001210194532.H86825@elvis.mu.org> References: <00dd01c05e2e$e42a0700$0b6cffc8@infolink.com.br> <20001209112247.A22773@diabolic-cow.chatgris.net> <20001210111051.F86825@elvis.mu.org> <20001210194648.B22773@diabolic-cow.chatgris.net> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit User-Agent: Mutt/1.2.5i In-Reply-To: <20001210194648.B22773@diabolic-cow.chatgris.net>; from rguyom@pobox.com on Sun, Dec 10, 2000 at 07:46:48PM +0100 X-Operating-System: FreeBSD 4.2-FEARSOME-20001103 i386 Sender: billf@elvis.mu.org Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sun, Dec 10, 2000 at 07:46:48PM +0100, Rémi Guyomarch wrote: > > Actually, _you're_ wrong. DUMMYNET is very ipfw specific. > > Check the mail archives. You can use both firewall packages at the > same time. If you want to use IPFilter, then simply add it to the > kernel config, along with IPFIREWALL (ipfw) and DUMMYNET : > > options IPFIREWALL > options IPFIREWALL_DEFAULT_TO_ACCEPT > options DUMMYNET > options IPFILTER > options IPFILTER_LOG I'm very familiar with ipfw's workings, thanks. The fact remains that DUMMYNET works with IPFIREWALL only. IPFILTER works in unison with IPFIREWALL(aka ipfw), but you can't use DUMMYNET pipes with IPFILTER rules.. -- Bill Fumerola - security yahoo / Yahoo! inc. - fumerola@yahoo-inc.com / billf@FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message