What is your favourite/best firewall on FreeBSD and why?

[k simon]

   Does FB exist some methods can log the ClientIp\NatIp\ServerIp tuple 
when using ipfw nat ?

Regards
Simon

于 14-5-23 18:04, Dr Josef Karthauser 写道:
> On 23 May 2014, at 10:00, G. Paul Ziemba <pz-freebsd-stable at ziemba.us> wrote:
>
>> Lucius.Rizzo at The.ie (Lucius Rizzo) writes:
>>
>>> Ultimately, outside configuration differences all firewalls are essentially
>>> serve the same purpose but I wonder what is your favorite and why? If
>>> you were to run FreeBSD in production, which of the three would you
>>> choose? IPFilter, PF or IPFW?
>>
>> I switched to pf about seven months ago as I began to need to
>> manage bandwidth for specific classes of traffic (for example,
>> prevent outbound mailing list email from saturating the link
>> and reserve some bandwidth for interactive use).
>>
>> The syntax is very close and the NAT configuration is simpler in pf.
>
> Does the pfsync handle NAT tables.
> Could I use it to build a resilient carrier grade NAT solution?
>
> Joe
>