Which version of ipf to use? Any tools?

On my 4.9 STABLE IP Filter: v3.4.31 (336) came preinstalled. However, on http://coombs.anu.edu.au/~avalon/ip-filter.html, the current version is listed as 4.1 with a multi-homed patch.

Which one should I use? I also don't see ipf listed on the FreeBSD ports site nor on www.freshports.org.

Are any tools worth mentioning?

I will be using ipf on a multi-homed server which will be configured as a bridge or gateway (if you have any input on this, please visit the thread entitled "New server in uncontrolled environment" -- please!)

ipf version 4 isn't available on FreeBSD at the moment iirc. There was a post by Darren Reed on the freebsd-security(?) list a while ago on exactly the subject. ipf isn't in the ports system (I think pf is but not ipf). Ok this is the thread here:

http://marc.theaimsgroup.com/?l=fre...26086306807&w=2

So basically, just use the one that's included in the base system for now I suppose :P

Anyway, the source of ipf is available for download, so I presume it would compile just fine?



I don't mind using old versions, that's why I'm running 4.9 stable .

Anyway, since we seem to be the only ones communicating here :/, could you take a peek at my question in Networking?

[OT: What does iirc mean? It's the one acronym I haven't been able to figure out!]

Compile - sure - fine - not so sure :P Perhaps worth a go on a dev box?

Yep 4.9 is probably best bet, my main box is running the same. There are no features in 5.x that I need really

I'll check out the networking Q :P

iirc == if I remember correctly

Nah. I'm just getting into this, so better not play around with the "latest and greatest" .


Well, I'm talking about a production environment, so I'm more into reliability. Testing it out on a small group of about 15 machines.


Thanks!