Future of pf / firewall in FreeBSD ? - does it have one ?

krad kraduk at gmail.com
Fri Aug 1 07:39:12 UTC 2014

I always found natting in ipfw rather awkward and harder than in pf.
Looking at the man page it doesnt seem to have changed. I should probably
give it another go though as it has been about 10 years now

On 31 July 2014 14:41, Gleb Smirnoff <glebius at freebsd.org> wrote:

> On Thu, Jul 31, 2014 at 10:02:22PM +1000, Da Rock wrote:
> D> Without diminishing your efforts so far, what do you think about
> D> pitching all efforts into IPFW to combine effort and reduce overhead of
> D> maintaining separate firewalls in the core? Is there an advantage to
> D> having our own pf?
> Is there any disadvantage keeping it? It is a plugin. It is optional
> and loadable. I removed most additions to the network stack that live
> outside netpfil/pf.
> Some people like it and use it.
> It is also the only tool to configure ALTQ now.
> --
> Totus tuus, Glebius.
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "
> freebsd-questions-unsubscribe at freebsd.org"

More information about the freebsd-current mailing list