On Sat, 19 Jun 1999, Doug Rabson wrote:
> On 19 Jun 1999, Dag-Erling Smorgrav wrote:
>
> > "Brian F. Feldman" <[email protected]> writes:
> > > It might be worth (discussion of) making ipfilter the firewall of
> > > choice for 4.0. There would of course be rule conversion
> > > scripts/programs (ipfw->ipf(5)), and ipfilter would be converted to
> > > a KLD, cruft removed (I'm going to work on these), and ipfilter KLD
> > > support (currently options IPFILTER_LKM) made a non-option. It seems
> > > that our pretty proprietary ipfw is no longer a good idea.
> >
> > If ipfilter can to everything ipfw can (judging from ipf(5), it can)
> > and you even manage to keep an ipfw(8) command around so those who
> > want kan keep using the old syntax still can, then I for one have no
> > objections.
> >
> > Rewriting ipfw rules to ipfilter rules on the fly should be trivial; a
> > simple Perl script should be sufficient.
>
> Does ipfilter support divert sockets?
It still needs:
divert sockets
Luigi's stuff (dummynet and bridging)
my stuff
>
> --
> Doug Rabson Mail: [email protected]
> Nonlinear Systems Ltd. Phone: +44 181 442 9037
>
>
>
Brian Fundakowski Feldman _ __ ___ ____ ___ ___ ___
[email protected] _ __ ___ | _ ) __| \
FreeBSD: The Power to Serve! _ __ | _ \._ \ |) |
http://www.FreeBSD.org/ _ |___/___/___/
To Unsubscribe: send mail to [email protected]
with "unsubscribe freebsd-hackers" in the body of the message