Date: Fri, 07 Oct 2005 09:01:05 -0400 From: Chuck Swiger <cswiger@mac.com> To: Mark Cullen <mark.r.cullen@gmail.com> Cc: "Brian E. Conklin" <bconklin@masongeneral.com>, freebsd-questions@freebsd.org Subject: Re: Converting from IPFW to IPFILTER Message-ID: <43467191.2090902@mac.com> In-Reply-To: <434646C9.9090105@gmail.com> References: <CA513920FC73A14B964AB258D77EA8D6A44742@mx1.masongeneral.com> <BEF7E798-58F9-4B5A-8DC8-FFB5E96A47CA@mac.com> <434646C9.9090105@gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Mark Cullen wrote:
> Charles Swiger wrote:
[ ... ]
>> If you're going to switch to using IPF, you might want to consider
>> upgrading or reinstalling the OS to 5.4 instead of 4.11.
>
> Are there any particular reasons why you suggest switching from 4.11 to
> 5.4 if going from IPFW to IPF? Because I have just converted from IPFW2
> to IPF on 4.11-STABLE...
>
> I did notice that IPF appears to be a rather old version. 3.something,
> where the latest version of IPF is 4.something. Is this the reason?
Sort of. IPF was added to FreeBSD-5 and then backported ("MFC'ed") to the
later 4.x releases.
I don't know of any specific problems with IPF under 4.11. Because of the
significant differences in SMP and locking between 4.x and 5.x some of the work
and fixes done to improve using IPF and IPFW in combination may not be
applicable to 4.x, nevertheless, I would recommend using IPF with 5.x given the
choice.
--
-Chuck
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?43467191.2090902>