IP-Filter versus IPFW

• More extensive state tracking

• Security

• In-kernel NAT

• IPFW is FreeBSD specific

• IPFW is used as interface towards Dummynet

• They don't bite and can be used simultaneously (e.g. IPFW for Dummynet and IP-Filter for NAT)

• Try them both

Notes: