Re: ipfw/ipf IP filtering thoughts

2003-11-30 Thread Luigi Rizzo
On Sun, Nov 30, 2003 at 06:53:10AM -, Antti Louko wrote: > Generally, I like the (Free)BSD way of doing things. But the IP > filtering modules available for FreeBSD lack one feature when compared > to Linux way (ipchains and iptables). There is no "call" instruction by design in ipfw2. The re

Re: ipfw/ipf IP filtering thoughts

2003-11-30 Thread Richard Coleman
Antti Louko wrote: Generally, I like the (Free)BSD way of doing things. But the IP filtering modules available for FreeBSD lack one feature when compared to Linux way (ipchains and iptables). In ipchains and iptables you have a sequential list of rules, very much like in ipfw and ipf, but you can

Re: ipfw/ipf IP filtering thoughts

2003-11-30 Thread Antti Louko
You should be able to accomplish the same -- although in a more convoluted way -- with ipf[w]. You might want to use a higher-level tool though instead of writing all the rules by hand. Try using fwbuilder or code your own ab- straction which translates to ipfw rules. ipfw for example

Re: ipfw/ipf IP filtering thoughts

2003-11-30 Thread Volker Stolz
In local.freebsd-hackers, you wrote: > In ipchains and iptables you have a sequential list of rules, very > much like in ipfw and ipf, but you can have several different lists > which have symbolic names and you can make calls from lists to other > lists based on normal packet criteria. If the lis

ipfw/ipf IP filtering thoughts

2003-11-29 Thread Antti Louko
Generally, I like the (Free)BSD way of doing things. But the IP filtering modules available for FreeBSD lack one feature when compared to Linux way (ipchains and iptables). In ipchains and iptables you have a sequential list of rules, very much like in ipfw and ipf, but you can have several diffe