Re: traffic normalizer for ipfw?

From: Bruno Afonso (bruno_at_mrna.ist.utl.pt)
Date: 02/26/04

  • Next message: Jacques A. Vidrine: "Re: Environment Poisoning and login -p" 
    Date: Thu, 26 Feb 2004 14:43:42 +0000
To: freebsd-security@freebsd.org

    Darren Reed wrote:

    > normalizing is over rated as a firewall feature - it's really
    > something that belongs in IDS software.
    >
    >
    >>We're looking at bringing pf into the tree.
    >
    >
    > For what benefit you have to wonder...

    It's BSD licensed. It's nicely integrated with altq that will also
    hopefully come into the tree. That alone is worth it, let alone other
    nice features. And yes, users like this features and that's something
    you are going to have to live with.

    Please stop this pf bashing you are fond of and stop thinking you know
    what others like/want in a firewall. Choice is a great thing, respect that.

    BA 

    -- 
Bruno Miguel Afonso
Biological Eng. student
D.E.Q. @ I.S.T. - Portugal
GnuPG Public key: http://dequim.ist.utl.pt/~bruno/gpg
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
  • Next message: Jacques A. Vidrine: "Re: Environment Poisoning and login -p"

    Relevant Pages

    • Re: [GIT PATCH] scsi bug fixes for 2.6.23-rc2
      ... no-one apparently tested all the features together ... I pulled again on July 20 and all the bsg code was in mainline. ... The initial bsg submit went via the block git tree ... ... window git trees) and nothing else. ...
      (Linux-Kernel)
    • Re: RFD: Kernel release numbering
      ... practice, is to put "more intrusive" features into -mm first, and only ... -mm would be the 'feature tree'. ... SUSE LINUX Products GmbH - A Novell Business ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)
    • Re: Multiple Artist Indexing Probs with WMP10
      ... now I can see three nodes in the Contributing artist tree on the left ... thing since WMP library features represent similar features to what ... > but without having to loose the autoplaylist retrieving feature? ... That gets you the union of the entries, not the desired intersection. ...
      (microsoft.public.windowsmedia.player)
    • Re: My thoughts on the "new development model"
      ... |>of the features they need. ... | could have a permanent 4-digit kernel version. ... The current high-speed development model could be reused as ... but usable tree instead of a flat out unstable tree (as ...
      (Linux-Kernel)
    • Re: The computer asigns the name *HESUKS* to Dave *the ped* for moderation at UKLM
      ... You're barking in the wrong forest, let alone up the wrong tree. ... know of a vulnerable youth who alleged that he had been blackmailed by ...
      (uk.legal)