ipfilter(4) needs maintainer

Mark Martinec Mark.Martinec+freebsd at ijs.si
Sun Apr 14 22:25:14 UTC 2013


On Sunday April 14 2013 19:30:22 wishmaster wrote:
> > Do we honestly need three packet filters?
> Yes! This is the most clever thought in this thread. Why we need 3
> firewalls? Two packet filters it's excess too. We have two packet filters:
> one with excellent syntax and functionality but with outdated bandwidth
> control mechanism (aka ALTQ); another - with nice traffic
> shaper/prioritization (dummynet)/classification (diffused) but with
> complicated implementation  in not trivial tasks. May be the next step
> will be discussion about one packet filter in the system?..

... and as far as I can tell none of them is currently usable
on an IPv6-only FreeBSD (like protecting a host with sshguard),
none of them supports stateful NAT64, nor IPv6 prefix translation :(

  Mark


More information about the freebsd-net mailing list