bridge + pf

From: Claudiu Dragalina-Paraipan (dr.clau_at_rdslink.ro)
Date: 09/27/04

  • Next message: Jerry Toung: "remote debugging question" 
    Date: Mon, 27 Sep 2004 20:17:22 +0300
To: freebsd-hackers@freebsd.org

    Hello,

    I would like to know if I can use PF for filtering with FreeBSD bridging
    support. I understand that both IPFW and IPF are supported.
    I am using FreeBSD 5.2.1 right now, and I will stick with it until 5.3
    release.

    I saw that this two MIBs exist:
    net.link.ether.bridge.ipf
    net.link.ether.bridge.ipfw

    I assume that one is for ipf and one for ipfw, and I seen nothing
    related to pf. Or enabling ipf means that I have support for pf too ?

    Thank you in advance. 

    -- 
Claudiu Dragalina-Paraipan
e-mail: dr.clau@rdslink.ro
_______________________________________________
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
  • Next message: Jerry Toung: "remote debugging question"

    Relevant Pages

    • RE: FreeBSD - Secure by DEFAULT ?? [hosts.allow]
      ... But why IPFW? ... IPF is *BSD native wall. ... > hosts.allow file on a FreeBSD Production Server? ... but with no Firewall yet. ...
      (FreeBSD-Security)
    • Re: dummynet module?
      ... because ipfw sorts by the explicit rule numbers you supplied, ... function to IPF if you're still concerned about your ipfw rules ... login over the net, or that the system hangs and you can't login from ... check the logs from the console to see what's denying the packets. ...
      (comp.unix.bsd.freebsd.misc)
    • Re: FreeBSD - Secure by DEFAULT ?? [hosts.allow]
      ... They both exist as part of the base FreeBSD ... both ipf and ipfw are "native" to FreeBSD. ... > native firewall, ...
      (FreeBSD-Security)
    • Re: The way forward
      ... > Pf seems to scale better than netfilter/iptables, ipfw, or ipf. ... > basically "Why would we need another packet filter?" ... FreeBSD randomizes ISNs, ...
      (FreeBSD-Security)
    • Re: /etc/rc.firewall fixes
      ... > I would like to see configuration code for ipfw AND ipfilter ... ipf got its hooks before 4.2-RELEASE. ... never make it into ipfilter itself. ... This enables you to do some rc.firewall like things ...
      (FreeBSD-Security)