Good night.

In message <21617.931190154@coconut.itojun.org>
	on Tue, 06 Jul 1999 00:55:54 +0900,
	Jun-ichiro itojun Hagino <itojun@itojun.org> wrote:
> 	- NetBSD's IPv4 filtering code compress states very well (= code
> 	  is complex) and is not straightforward to update it to handle IPv6
> 	- every *BSD has different implementation of IPv4 packet filter,
Maybe you know, NetBSD's filtering core is based on ipfilter, and it
runs with many OSs.

> 	Or, you may want to grab ip6fw (IPv6 packet filtering code based on
> 	FreeBSD 2.2.8's ipfw) from KAME/FreeBSD228, and put it into your
> 	kernel.
I've never evaluated or compared between ipfw and ipfilter much, but
ipfilter supports FTP proxy.  So I prefer ipfilter.

Cheers.

--
Takahiro Kambe <taca@sky.yamashina.kyoto.jp>