Subject: Re: IPv4 and IPv6
To: Takahiro Kambe <taca@sky.yamashina.kyoto.jp>
From: Thierry Herbelot <herbelot@cybercable.fr>
List: current-users
Date: 07/05/1999 21:04:47
Takahiro Kambe wrote:
>
> Good night.
>
> In message <21617.931190154@coconut.itojun.org>
> on Tue, 06 Jul 1999 00:55:54 +0900,
> Jun-ichiro itojun Hagino <itojun@itojun.org> wrote:
> > - NetBSD's IPv4 filtering code compress states very well (= code
> > is complex) and is not straightforward to update it to handle IPv6
> > - every *BSD has different implementation of IPv4 packet filter,
> Maybe you know, NetBSD's filtering core is based on ipfilter, and it
> runs with many OSs.
>
> > Or, you may want to grab ip6fw (IPv6 packet filtering code based on
> > FreeBSD 2.2.8's ipfw) from KAME/FreeBSD228, and put it into your
> > kernel.
> I've never evaluated or compared between ipfw and ipfilter much, but
> ipfilter supports FTP proxy. So I prefer ipfilter.
Ipfw also does support transparent ftp proxying : you don't have to
specify "passive" when (like me) you're behind a FreeBSD nat-ing
firewall
TfH
>
> Cheers.
>
> --
> Takahiro Kambe <taca@sky.yamashina.kyoto.jp>