Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 14 Jun 2002 13:32:09 +0200
From:      Sheldon Hearn <sheldonh@starjuice.net>
To:        Attila Nagy <bra@fsn.hu>
Cc:        Andrey Sverdlichenko <blaze@infosec.ru>, security@freebsd.org
Subject:   Re: firewall 'stateful failover' 
Message-ID:  <35862.1024054329@axl.seasidesoftware.co.za>
In-Reply-To: Your message of "Fri, 14 Jun 2002 12:40:17 %2B0200." <Pine.LNX.4.44.0206141239420.21411-100000@scribble.fsn.hu> 

next in thread | previous in thread | raw e-mail | index | archive | help


On Fri, 14 Jun 2002 12:40:17 +0200, Attila Nagy wrote:

> > > Is there a way to handle the state table in ipfw/ipf?  I could write
> > > scripts to do 'failover', but I'm wandering if there's a way to 'share'
> > > the state table between active and standby units or to pass the state
> > > table from one firewall to another over a crossover.

> This is implemented in IPF4 AFAIK.
> You should try its alpha version...

No.  Darren said it's something he's considering for v4.  At this stage,
he's not sure whether it'll be part of the standard distribution, a
value-add or included at all.

Ciao,
Sheldon.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?35862.1024054329>