Which Firewall?

[bycn82]

*Hi,*

*1. Which is preferable? I think different people have different answers,
So why not try both? But what I want to say here is "both PF and ipfw are
better than on other BSD systems", at least I know my ipfw is a "lockless"
stateful firewall.*

*2. I am not familiar with the HAMMER FS. But according to what I know,
HAMMER FS is one of the best filesystems,I cannot tell which is better
between HAMMER,ZFS and EXT4.*

*You can get more information from the IRC channel #dragonflybsd on efnet.*

*Regards,*
*Bycn82*

On Tue, Dec 16, 2014 at 1:02 AM, Jeremy <dyre17 at gmail.com> wrote:
>
> to your point "Sorry I dont get the point of why you got confused."
> I am confused because the handbook states pf is preferred. Yet the rest of
> the handbook presents ipfw as if it were preferable. The mailing list
> archives seem to suggest there are more people who feel ipfw is a very good
> choice.  Even you seem to feel ipfw is preferable.  So is pf really
> preferable?  Because it seem ipfw is.
>
> Sorry to sound like I am ignorant, but I really am. I am trying to break
> away from Linux & learn the bsd's.  I have found dragonfly bsd to be a very
> interesting project because to its focus on security + the hammer fs.  But
> trying to shift my thinking has been difficult because there is a lot I do
> not understand.
>
> On Mon, Dec 15, 2014 at 11:41 AM, bycn82 <bycn82 at gmail.com> wrote:
>>
>> *Hi,*
>>
>> *Sorry I dont get the point of why you got confused. there are 2 firewall
>> in DragonflyBSD*
>>
>> *PF is a great firewall, it is used in all BSD systems. especially the PF
>> in DragonflyBSD, it is "SMP-Friendly",*
>>
>> *IPFW in DragonflyBSD was inherited from FreeBSD as you know that
>> DragonflyBSD was forked from FreeBSD.*
>>
>> *Personally I prefer IPFW, It is "modular" and "SMP-Friendly". for more
>> detail ,you can get from  **http://www.dragonflybsd.org/docs/ipfw2/
>> <http://www.dragonflybsd.org/docs/ipfw2/>   and if you send me personally
>> if you have any question about it.*
>>
>>
>> *Regards,*
>> *Bill Yuan*
>>
>>
>> On Mon, Dec 15, 2014 at 11:21 PM, Jeremy <dyre17 at gmail.com> wrote:
>>>
>>> Hi all,
>>>
>>> the Dragonfly handbook states pf is the recommended firewall, yet goes
>>> on to say that the included pf is the older pf & that ipfw has features not
>>> yet available in pf.  Then it goes on to give very detailed instructions
>>> for ipfw & points pf users to (seemingly) broken link as a manual.
>>>
>>> I find this misleading & confusing, as it suggests that ipfw may be a
>>> more sensible way to go, despite stating that pf is "recommended".
>>>
>>> Could someone kindly rectify my understand here?
>>>
>>> Thank you.
>>>
>>> -Jeremy
>>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.dragonflybsd.org/pipermail/users/attachments/20141216/46d42912/attachment-0003.htm>