[nycbug-talk] ipfw, ipf, pf comparison matrix

[George R.]

Isaac Levy wrote:
> Hi All,
> 
> On Sep 9, 2006, at 4:15 PM, Isaac Levy wrote:
> 
>> Ray reminded me to post the comparison of ipfw, ipf, and pf to the
>> talk list- here it is, in ASCII.
> 
> So I've gotten some polite offlist replies to this already,  
> basically, I've been told the list is fairly out of date, especially  
> where PF is concerned.
> 
> With that, I'm no packet-filter guru, I'd totally love it if folks on  
> list would double-check the features, and re-post it!

Come on Ike, don't give us that. . . *You* aren't a guru to review this?

;-'

BTW, has anyone used PF on the master jail in FBSD to filter for the
jails?  I know ipfw is the standard way to do packet-filtering with
jails. . .

g