On Tue, Feb 12, 2019 at 9:46 AM Justin Sherrill <[email protected]> wrote:
> On Tue, Feb 12, 2019 at 12:15 PM Freddie Cash <[email protected]> wrote: > > > > Don't know too much about the state of packet filters in DFly, but > wasn't there an IPFW3 re-write/upgrade done awhile back, such that DFly > IPFW is fairly different now from FreeBSD IPFW? > > It's poorly named; ipfw3 is a completely separate effort by Bill Yuan. > ipfw is still there in DragonFly. ipfw3 does not replace or modify > it. > Ah, I see. So DFly is in a similar boat as FreeBSD with 3 separate packet filters: ipfw, ipfw3, pf. Which you use depends on which style you prefer (first-match wins / last-match wins) and which you have more experience with. :) > > Basically, on OpenBSD, you use PF. On DFly, you use IPFW. On FreeBSD, > you can choose which style of packet filter you prefer (although I'd > recommend not using IPFilter). > > I'd suggest pf in DragonFly mostly because I've been using it on > DragonFly for years. Like most things, it depends on what you want to > do. > Didn't realise DFly had a PF port. Interesting. -- Freddie Cash [email protected]
