Firewalls

[Zane C.B.]

On Tue, 29 Apr 2008 09:51:29 -0700
perikillo <perikillo at gmail.com> wrote:

> On Mon, Apr 28, 2008 at 12:50 PM, Bruce Cran <bruce at cran.org.uk>
> wrote:
> 
> > Doug Hardie wrote:
> >
> > > FreeBSD supports 3 firewalls:  IPF, IPFW, and PF.  Some time ago
> > > (perhaps years) I seem to recall some discussion that one or
> > > more of those was better maintained and higher quality than the
> > > others.  I don't see any indications of this in the handbook.
> > > Several years ago I needed to do traffic shaping and used IPFW
> > > with dummynet.  It worked but the need eventually went away.
> > > More recently I needed to incorporate spamd which defaults to
> > > PF so I used that.  However, now I am back to needing traffic
> > > shaping again.  I suspect trying to use both PF and IPFW
> > > simultaneously will not be a good approach.  In addition, there
> > > now are instructions for using spamd with IPFW so it appears
> > > that either PF or IPFW will do what I need. Is there any
> > > additional information available to assist in selecting between
> > > those?  Thanks.
> > >
> >
> > As I understand it pf is often found to be easiest to use and has
> > lots of features like altq and os fingerprinting but is quite a
> > bit slower than ipfw.
> >
> > --
> > Bruce
> >
> > _______________________________________________
> > freebsd-questions at freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to "
> > freebsd-questions-unsubscribe at freebsd.org"
> >
> 
>  Reading this post, i have some doubt, how is IPFW support for VoIP
> packets, can do traffic shaping?, i read that PF can do that, I'm
> right?

What exactly are you looking to do in this area?