Re: ipfilter(4) needs maintainer

From: Mark Martinec <Mark.Martinec+freebsd_at_ijs.si>
Date: Mon, 15 Apr 2013 00:25:07 +0200
On Sunday April 14 2013 19:30:22 wishmaster wrote:
> > Do we honestly need three packet filters?
> Yes! This is the most clever thought in this thread. Why we need 3
> firewalls? Two packet filters it's excess too. We have two packet filters:
> one with excellent syntax and functionality but with outdated bandwidth
> control mechanism (aka ALTQ); another - with nice traffic
> shaper/prioritization (dummynet)/classification (diffused) but with
> complicated implementation  in not trivial tasks. May be the next step
> will be discussion about one packet filter in the system?..

... and as far as I can tell none of them is currently usable
on an IPv6-only FreeBSD (like protecting a host with sshguard),
none of them supports stateful NAT64, nor IPv6 prefix translation :(

  Mark
Received on Sun Apr 14 2013 - 20:25:14 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:36 UTC