o

[Julian Elischer]

On 2/26/12 5:34 AM, Bob Bishop wrote:
> Hi,
>
> I'd like to hear from somebody who understands this stuff on the relative merits of blackhole routes vs firewall drop rules for dealing with packets from unwanted sources. I'm particularly interested in efficiency and scalability. Thanks

the key is the word "from".  routes can only be selected on 'TO' 
(destination) where
firewalls can select on any combination of header fields.



> --
> Bob Bishop
> rb at gid.co.uk
>
>
>
>
> _______________________________________________
> freebsd-hackers at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to "freebsd-hackers-unsubscribe at freebsd.org"
>
>