[afnog] IPfw + IPv6 in FreeBSD-6.0

[Joe Abley]

On 5-Apr-2007, at 16:03, Mark Tinka wrote:

> I'm testing basic packet filtering with IPfw for IPv6 on FreeBSD
> 6.0-RELEASE. v6 support in IPfw appears to be massively buggy
> and/or broken in this release.
>
> I'm looking to upgrade this box over the next few weeks to
> 6.2-RELEASE and try again, but just wanted to know whether
> anyone else experienced this on this particular release.

If you track RELENG_6_2 there's a couple of patches beyond 6.2- 
RELEASE you might be interested in installing, too.

For a long time my personal opinion of ipfw on FreeBSD was "that's  
what people used to use before ipf". Now it seems to me that ipf is  
what people used to use before pf.

I hear (but don't know enough about ipfw to confirm) that ipfw has  
some unique features that make it a sensible choice in some  
circumstances. If you're not using any of those special features,  
though, you might try pf and see how you like it.


Joe