Re: Feedback on IPFW

[ajk () iu edu (Andrew J. Korty)]

"Ripper Roo" <ripper_roo1 () hotmail com> writes:

> I am currently evaluating FreeBSD(4.4)/IPFW and would like to receive
> feedback from experimented users, so good news and bad news are very
> welcomed.

I used ipfw with FreeBSD 4.2 and had problems making stateful TCP
rules in ipfw work with natd since natd and ipfw don't seem to share
state data.  Maybe that problem is fixed in 4.4.  I switched to IP
Filter[1], which is also bundled with FreeBSD, and found I preferred
it.

Footnotes: 
[1] http://www.obfuscation.org/ipf/

-- 
Andrew J. Korty, Principal Security Engineer, GCIA
Office of the Vice President for Information Technology
Indiana University
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards