|
||||||||
I run a constantly saturated 100Mbit line through a filtering bridge based on OpenBSD and PF...it hasn't failed once on over 2 years of constant uptime, so I wouldn't say it will crash under very heavy load. Just my $0.02 -Bryan -----Original Message----- From: edward mzj [mailto:edward dot mzj at gmail dot com] Sent: Wednesday, September 14, 2005 9:14 PM To: m0n0wall at lists dot m0n0 dot ch Subject: Re: [m0n0wall] ip/ipf ipf v3.4.35 is the stablest one. it is said pf will crash under very heavy load 2005/9/15, Chris Buechler <cbuechler at gmail dot com>: > On 9/14/05, Mathias Burén <mathias dot buren at gmail dot com> wrote: > > Hi there! > > > > I was just wondering, uhm, m0n0wall currently (1.2b10) uses pf > > (packetfilter), right? There's also ipf (IP Filter) in *BSD... I was > > wondering why m0n0wall doesn't use ipf instead of pf! I don't know > > why/if it should, just a question. Would it take much to rewrite > > m0n0wall for ipf? Well, I guess it would if it used a different > > syntax... Maybe a wrapper could be written for it (like a script.sh > > file which took inputs and made ipf commands out of the inputs). > > Would 'we' benefit from having ipf in m0n0wall instead of pf? > > > > It already is ipf, and always has been. Honestly, pf is a much > superior packet filter in most every way, so if the above was true I'd > ask "why bother"? :) Can't say that I have any experience with ipf > 4.x, though I hear it's buggier than 3.x and 3.x has enough quirks > already (4.x adds many of the important features pf has that ipf 3.x > is lacking). > > After 1.2 is released, Manuel is going to start a discussion here on > the OS and packet filter for the next m0n0wall version. > > -Chris > > --------------------------------------------------------------------- > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch > > --------------------------------------------------------------------- To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch |