Re: IPFW or pf?

2005-03-16 Thread Peter N. M. Hansteen
Andreas Davour <[EMAIL PROTECTED]> writes: > So, the base systems ships with two firewalls? Three, actually - ipfw, ipf and pf. There's a brief explanation why in the handbook at http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-apps.html I prefer pf myself, but which one to

Re: IPFW or pf?

2005-03-16 Thread Peter N. M. Hansteen
Andreas Davour <[EMAIL PROTECTED]> writes: > Can someone tell me if it's ok to just use IPFW on my STABLE system, or > is there some other knobs in the kernelconfig I should toggle to turn > off pf support? By default pf is compiled as a loadable module, which you load if you want to run pf, le

Re: IPFW or pf?

2005-03-15 Thread Andreas Davour
On Tue, 15 Mar 2005, Lowell Gilbert wrote: Andreas Davour <[EMAIL PROTECTED]> writes: I have read the handbook about firewalls, and compiled my kernel without switching on any explicit support for pf. Now, when I ran the mergemaster it suddenly found a lot of references to pf in my startup scripts.

Re: IPFW or pf?

2005-03-15 Thread Lowell Gilbert
Andreas Davour <[EMAIL PROTECTED]> writes: > I have read the handbook about firewalls, and compiled my kernel > without switching on any explicit support for pf. > > Now, when I ran the mergemaster it suddenly found a lot of references > to pf in my startup scripts. The startup scripts support p

Re: ipfw or pf

2005-03-13 Thread Mark Rowlands
On Sunday 13 March 2005 09:16, Loren M. Lang wrote: > On Fri, Mar 04, 2005 at 01:41:23PM +0100, Albert Shih wrote: > > Le 03/03/2005 ? 13:07:53-0800, Loren M. Lang a ?crit > > > > > > Well it's not de syntaxes, I always use packet filter system > > > > (sometime on hardware like Foundry/Cisco) whe

Re: ipfw or pf

2005-03-13 Thread Loren M. Lang
On Fri, Mar 04, 2005 at 01:41:23PM +0100, Albert Shih wrote: > Le 03/03/2005 ? 13:07:53-0800, Loren M. Lang a ?crit > > > Well it's not de syntaxes, I always use packet filter system (sometime on > > > hardware like Foundry/Cisco) where the rule is : First match first use. > > > And > > > the pf

Re: ipfw or pf

2005-03-04 Thread Albert Shih
Le 03/03/2005 à 13:07:53-0800, Loren M. Lang a écrit > > Well it's not de syntaxes, I always use packet filter system (sometime on > > hardware like Foundry/Cisco) where the rule is : First match first use. And > > the pf use entire rules is very strange for me (I known I can use ?quick? > > but..

Re: ipfw or pf

2005-03-03 Thread Loren M. Lang
On Wed, Mar 02, 2005 at 12:57:06PM +0100, Albert Shih wrote: > Le 02/03/2005 ? 09:03:23+0100, Stevan Tiefert a ?crit > > > > > > On Tue, 1 Mar 2005, Albert Shih wrote: > > > > > > > > > The both packef filters are maintained! pf is "ported" from OpenBSD and > > ipfw is from FreeBSD. > > Great

Re: ipfw or pf

2005-03-02 Thread Albert Shih
Le 02/03/2005 à 09:03:23+0100, Stevan Tiefert a écrit > > > On Tue, 1 Mar 2005, Albert Shih wrote: > > > > > The both packef filters are maintained! pf is "ported" from OpenBSD and > ipfw is from FreeBSD. GreatI can continu to use ipfw;-)) > > Whenever two programs two syntaxes...

Re: ipfw or pf

2005-03-02 Thread Stevan Tiefert
On Tue, 1 Mar 2005, Albert Shih wrote: > Hi all, > > >From FreeBSD 4.5 I use ipfw on freebsd-box with 3 NIC card. > > Now I'm in FreeBSD 5.1. I've see in FreeBSD 5.3 there are pf and ipfw, why > there two versions ? The ipfw is always maintened ? Or I need to switch to > pf ? > > Why can I do wi