IP-Filter vs IPFW
- More extensive state tracking
- Security
- In-kernel NAT
- IPFW is FreeBSD specific
- IPFW has interface towards dummynet
- They don't bite and can be tried both simultaneously (e.g. IPFW for dummynet and filtering and IP-Filter for NAT)
- Try them both
Notes:
No notes for slide 3