Takahiro Kambe wrote:
> 
> Good night.
> 
> In message <21617.931190154@coconut.itojun.org>
>         on Tue, 06 Jul 1999 00:55:54 +0900,
>         Jun-ichiro itojun Hagino <itojun@itojun.org> wrote:
> >       - NetBSD's IPv4 filtering code compress states very well (= code
> >         is complex) and is not straightforward to update it to handle IPv6
> >       - every *BSD has different implementation of IPv4 packet filter,
> Maybe you know, NetBSD's filtering core is based on ipfilter, and it
> runs with many OSs.
> 
> >       Or, you may want to grab ip6fw (IPv6 packet filtering code based on
> >       FreeBSD 2.2.8's ipfw) from KAME/FreeBSD228, and put it into your
> >       kernel.
> I've never evaluated or compared between ipfw and ipfilter much, but
> ipfilter supports FTP proxy.  So I prefer ipfilter.

Ipfw also does support transparent ftp proxying : you don't have to
specify "passive" when (like me) you're behind a FreeBSD nat-ing
firewall

	TfH

> 
> Cheers.
> 
> --
> Takahiro Kambe <taca@sky.yamashina.kyoto.jp>