Re: ipfilter causing kernel panic in FreeBSD 6.1

Darren Reed <[email protected]> Wed, 28 May 2008 19:30:48 -0700

Newsgroups	gmane.comp.security.firewalls.ipfilter
Message-ID	<[email protected]>

Mire, John wrote:
> Would it make sense to rearrange the order of ipfw vs ipfilter so it's
> first in and last out so you could use ipfw just for that kind of
> utility to "screen" frags, so it's
> ipfw(in)->ipnat(in)->ipfilter(in)->ipfilter(out)->ipfw(out)
>   

Ideally, you should be able to define the order yourself.

Darren