Date: Thu, 25 Nov 1999 22:22:29 +0100 From: Guido van Rooij <guido@gvr.org> To: Kris Kennaway <kris@hub.freebsd.org> Cc: Julian Elischer <julian@whistle.com>, "Rodney W. Grimes" <rgrimes@gndrsh.dnsmgr.net>, Brian Fundakowski Feldman <green@freebsd.org>, arch@freebsd.org Subject: Re: new IPFW Message-ID: <19991125222229.A55360@gvr.gvr.org> In-Reply-To: <Pine.BSF.4.21.9911250054120.28352-100000@hub.freebsd.org>; from Kris Kennaway on Thu, Nov 25, 1999 at 01:30:53AM -0800 References: <Pine.BSF.4.10.9911240245250.11412-100000@current1.whistle.com> <Pine.BSF.4.21.9911250054120.28352-100000@hub.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Nov 25, 1999 at 01:30:53AM -0800, Kris Kennaway wrote: > > On another track, someone already raised the issue of ipfilter - this is > as close to a standard as there is in the UNIX firewalling world > (especially as the other BSDs use it exclusively). Of course, basing work > on ipfilter isn't necessarily compatible with revolutionising the guts of > the code, but we could provide a compatible interface. An ipfw->ipfilter > rule translator can't be that difficult (I'm assuming the ipfilter > functionality is a superset of ipfw, which seems to be at least > approximately true). Darren Reed also makes a filter compilr that can output ipfilter stuff, cisco access lists etc. Perhaps it's worthwhile to add ipfw support. I believe ne can find it at http://coombs.anu.edu.au/~avalon/ -Guido To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19991125222229.A55360>