what firewall to use ? outdated/misguided/whatever documentation ?

[Freddie Cash]

On Tue, Feb 12, 2019 at 9:46 AM Justin Sherrill <justin at shiningsilence.com>
wrote:

> On Tue, Feb 12, 2019 at 12:15 PM Freddie Cash <fjwcash at gmail.com> wrote:
> >
> > Don't know too much about the state of packet filters in DFly, but
> wasn't there an IPFW3 re-write/upgrade done awhile back, such that DFly
> IPFW is fairly different now from FreeBSD IPFW?
>
> It's poorly named; ipfw3 is a completely separate effort by Bill Yuan.
> ipfw is still there in DragonFly.  ipfw3 does not replace or modify
> it.
>

Ah, I see.  So DFly is in a similar boat as FreeBSD with 3 separate packet
filters:  ipfw, ipfw3, pf.  Which you use depends on which style you prefer
(first-match wins / last-match wins) and which you have more experience
with.  :)


> > Basically, on OpenBSD, you use PF.  On DFly, you use IPFW.  On FreeBSD,
> you can choose which style of packet filter you prefer (although I'd
> recommend not using IPFilter).
>
> I'd suggest pf in DragonFly mostly because I've been using it on
> DragonFly for years.  Like most things, it depends on what you want to
> do.
>

Didn't realise DFly had a PF port.  Interesting.

-- 
Freddie Cash
fjwcash at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.dragonflybsd.org/pipermail/users/attachments/20190212/7a0679a8/attachment-0003.htm>