Subject: Re: ipf and pflkm
To: Matthias Scheler <tron@zhadum.de>
From: Rui Paulo <rpaulo@NetBSD.org>
List: tech-net
Date: 09/17/2005 15:07:21
--2/5bycvrmDh4d1IB
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2005.09.17 13:42:06 +0000, Matthias Scheler wrote:
| In article <20050917063721.GA7627@sunny>,
| 	Water NB <netbsd78@126.com> writes:
| > NetBSD has ipf
|=20
| NetBSD 3.0_BETA and newer also include PF. You comment out
| "pseudo-device ipfilter" and enable "pseudo-device pf".
|=20
| > Which is better and more powerful?
|=20
| PF:
| - stable IPv6 support
| - much more powerful configuration language
| - support for proxy applications in userland
| - traffic normalization
| etc.

FYI, you can't do ALTQ + PF on NetBSD 3.0_BETA.

		-- Rui Paulo

--2/5bycvrmDh4d1IB
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (NetBSD)

iD4DBQFDLCMZZPqyxs9FH4QRAtPqAJd2BpH9RBqJBDYfEqtvOTCCGBjzAKCgzRGS
5A0m9uCSayczxb752/PwBQ==
=PxFZ
-----END PGP SIGNATURE-----

--2/5bycvrmDh4d1IB--