# [EMAIL PROTECTED] / 2002-10-19 02:02:10 +0200:
> Saturday, October 19, 2002, 1:40:42 AM, you wrote:
> RM> do people have any favorite security software that they always run in addition
>to ipfw or ipfilter?
>
> My favorite firewall is ipfilter. Mainly because it doesn't run in
> userland like ipfw does.
hrmm, this is nonsense. ipfw sits in kernel of course. what runs in
userland is its companion, natd(8). if you don't nat you don't need
to care. if you don't nat on a very slow/loaded box, that is.
as has been said on the list, the fact that natd is a userland
process has its ups as well: a bug in natd won't panic your gateway
(i gathered from the lists that there used to be a bug in ipnat that
caused just that).
n.b.: i'm an ipfilter user.
--
If you cc me or take the list(s) out completely I'll most likely
ignore your message.
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message
