nick hilliard nicklistsnetabilityie warning veering topic philip reynolds wrote paul jakmas paulclubiie 67 lines wisdom included thought firewalling code bsds fairly related sorry freebsds ipfw encumbered way old obsd firewalling ipfw written specifically freebsd bsd license luigi rizzo whos one freebsd whizzes three bsds packaged ipfilter around donkeys years slightly different feature set ipfw however last year author ipfilter darren reed changed license development branches ipfilter prohibit redistribution although official releases would still kept old license policy got nose theo de raadt lots things openbsd exists first place openbsd reinvented wheel called firewall pf fulltime bsd license standard release versions ipfilter unencumbered always nope indeed ipfw2 rolled stable stable stable branch code rolled current first basically major release thats still work progress im sure ipfw2 really ready production yet mfcd last wednesday certainly adds nice syntactic sugar apparently much faster certain types complex rulesets good time settle little ive experience ipfw closest ive come looking ipfilter irix problem wasnt maintained anymore however englishy syntax nice dont think iptables command syntax big obstacle ipfilter quite nice current os firewall choice nice features like ability save restore state connections persistent across reboots logging marginally better organised ipfws also mature code appeals rather conservative tastes old age nick irish linux users group iluglinuxie httpwwwlinuxiemailmanlistinfoilug unsubscription information list maintainer listmasterlinuxie 30 jul 2002 001142 0100 ilug ipfw vs ipchains vs iptables