Re: Firewalls (was Re: Introduction)

1999-06-19 Thread Brian F. Feldman
On Sat, 19 Jun 1999, Julian Elischer wrote: > As a contributor to ipfw, notice that I will be sticking my oar into the > water when it comes to deleting it unless I'm very sure that the ipf stuff > is better. Unless you're Danish you don't just get to delete bits of the > tree without a lot of agr

Re: Firewalls (was Re: Introduction)

1999-06-19 Thread Jordan K. Hubbard
> is better. Unless you're Danish you don't just get to delete bits of the s/Unless/Especially if/ :-) - Jordan To Unsubscribe: send mail to majord...@freebsd.org with "unsubscribe freebsd-hackers" in the body of the message

Re: Firewalls (was Re: Introduction)

1999-06-19 Thread Julian Elischer
As a contributor to ipfw, notice that I will be sticking my oar into the water when it comes to deleting it unless I'm very sure that the ipf stuff is better. Unless you're Danish you don't just get to delete bits of the tree without a lot of agreement, especially from those who are working on it..

Re: Firewalls (was Re: Introduction)

1999-06-19 Thread Jason Thorpe
On 19 Jun 1999 17:30:13 +0200 Dag-Erling Smorgrav wrote: > Divert sockets, dummynet and credential-based filtering would be > sorely missed if they weren't ported to ipfilter. ...but if they were ported to IP Filter, then lots of other systems could use them, too. -- Jason R. Thorpe

Re: Firewalls (was Re: Introduction)

1999-06-19 Thread Brian F. Feldman
On 19 Jun 1999, Dag-Erling Smorgrav wrote: > "Brian F. Feldman" writes: > > On 19 Jun 1999, Dag-Erling Smorgrav wrote: > > > Rewriting ipfw rules to ipfilter rules on the fly should be trivial; a > > > simple Perl script should be sufficient. > > Not quite as trivial as you think. ipfw and ipf ar

Re: Firewalls (was Re: Introduction)

1999-06-19 Thread Dag-Erling Smorgrav
"Brian F. Feldman" writes: > On 19 Jun 1999, Dag-Erling Smorgrav wrote: > > Rewriting ipfw rules to ipfilter rules on the fly should be trivial; a > > simple Perl script should be sufficient. > Not quite as trivial as you think. ipfw and ipf are completely backwards when > it comes > to rule orde

Re: Firewalls (was Re: Introduction)

1999-06-19 Thread Ian West
On Sat, Jun 19, 1999 at 11:12:07AM -0400, Brian F. Feldman wrote: > On 19 Jun 1999, Dag-Erling Smorgrav wrote: > > > "Brian F. Feldman" writes: > > > It might be worth (discussion of) making ipfilter the firewall of > > > choice for 4.0. There would of course be rule conversion > > > scripts/prog

Firewalls (was Re: Introduction)

1999-06-19 Thread Brian F. Feldman
On 19 Jun 1999, Dag-Erling Smorgrav wrote: > "Brian F. Feldman" writes: > > It might be worth (discussion of) making ipfilter the firewall of > > choice for 4.0. There would of course be rule conversion > > scripts/programs (ipfw->ipf(5)), and ipfilter would be converted to > > a KLD, cruft remov