Subject: freely available filter/screening systems
To: None <current-users@NetBSD.ORG>
From: VaX#n8 <>
List: current-users
Date: 06/16/1996 23:54:02
Here's the list I came up with.  Most should work under NetBSD with little
modification.  The first few can be found at COAST probably.

I'd be interested in coming up with or seeing some kind of feature
comparison some time according to the criteria below.

tcp_wrapper - Venema's tool
drawbridge - TAMU toolkit
screend - orig by DEC, maint by Vixie
ip_filter - the one over in, aka ip_filtXX.tar.gz
TIS FWTK - has a wrapper component
ipfirewall -
ipfw - dist with FreeBSD, may be same as ipfirewall above
       (i hate fw names -- they're often confusingly short and ambiguous)

   utilizes ack bit et. al. directly as a keywords
   filter on source & dest ports & addrs
   log accepted or dropped pkts
   filter inc & outgoing on per-interface basis
   should not reorder rules
   (if even possible) have testing/validation of rules
   dynamic filter adjustment