Subject: Re: ipf and pflkm
To: None <tech-net@NetBSD.org>
From: Matthias Scheler <tron@zhadum.de>
List: tech-net
Date: 09/17/2005 13:42:06
In article <20050917063721.GA7627@sunny>,
	Water NB <netbsd78@126.com> writes:
> NetBSD has ipf

NetBSD 3.0_BETA and newer also include PF. You comment out
"pseudo-device ipfilter" and enable "pseudo-device pf".

> Which is better and more powerful?

PF:
- stable IPv6 support
- much more powerful configuration language
- support for proxy applications in userland
- traffic normalization
etc.

	Kind regards

-- 
Matthias Scheler                                  http://scheler.de/~matthias/