Re: Firewall
- From: Peter Jeremy <peterjeremy@xxxxxxxxxxxxxxxx>
- Date: Sun, 29 Apr 2007 21:28:38 +1000
On 2007-Apr-28 07:08:18 -0500, Jack Barnett <jackbarnett@xxxxxxxxx> wrote:
I plan on using NAT so both internal networks can get to the internets.
In the FreeBSD documentation I see there are 3 firewalls, IPFIREWALL,
IPFILTER and PF (BF?). I just need to do basic filtering and just a few
port forwards. Nothing to fancy. Which one would be recommended?
Basically any of them will do what you want. The major differences are:
- IPFW (IPFIREWALL) is FreeBSD only. Note that the NAT is in userland.
- IPfilter is the most portable.
- PF runs on *BSD. Note that (AFAIK) all proxies (eg FTP) are in userland.
Userland NAT or proxies incur significantly higher overheads than
in-kernel equivalents (because the packets have to cross the
kernel/userland barrier twice). This may be an issue if you have a
very fast Internet connection and an underpowered firewall.
--
Peter Jeremy
Attachment:
pgpw9PsNGG2G2.pgp
Description: PGP signature
- Follow-Ups:
- Re: Firewall
- From: Robert Watson
- Re: Firewall
- From: Julian Elischer
- Re: Firewall
- References:
- Firewall
- From: Jack Barnett
- Firewall
- Prev by Date: Re: kern/105943: Network stack may modify read-only mbuf chain copies
- Next by Date: Re: Firewall
- Previous by thread: Re: Firewall
- Next by thread: Re: Firewall
- Index(es):
Relevant Pages
|
