ipf

When I see people taking about firewalls, they mainly seem to discuss PF and IPFW. I use IPFW and it seems to work fine, and I get why people like PF, but IPF is seldom mentioned, and when they do, people generally find a nice way to say that it is either crap, or worth forgetting about. Why...

Hello, i need some help understanging ipfilter and its statefull behaviour. I have created a ipsec tunnel with strongswan which is policy based. On the bsd router re1.7 it has the IP 10.111.7.254/24. I wan't to reach the device 10.111.7.1 that is connected to the bsd router. Wan is connected...

Hello, i am setting up a bsd router with ipfilter. My external network is on em0 with pppoe and an dynamic ip address via pppoe/dhcp. I already checked the manual but i could not find an predefined variable to get the interface IP in a ipf rule set. With a static wan IP i would create a...

Hi, which firewall should I choose between pf, ipf and ipfw for a home application or a small business? I've been using pf on my local laptop with a very minimal configuration, just to close every ports except the ones I need on my local network. But which one would you recommend for a...

A) How do/can you specify multiple interface in the "on" clause for IPFILTER rules? B) Do IPFILTER rules apply to lagg failover aggregations? C) What is preferred on a laptop workstation? Aggregations or multiple interface? I have a script for generating restrictive IPF ruleset, so I only...

I am returning to a project which used to use IPFilter to take raw packets passed straight through from a modem. It would filter and route accordingly over several interfaces to insure an isolated set of trusted and untrusted subnets over those separate interfaces (including to a honeypot)...