BSD Firewall (long)

[Luke Gorrie]

Jay Nelson <jay@REDACTED> writes:

> Everything is very similar to Linux in terms of administration
> (I've used System V, Solaris, Linux and other variants, so at
> least a lot of the utilities are familiar).  I really like the NAT /
> packet filtering features offered by pf.  ipchains may be very
> similar, but I've never gotten good tutorials on how to use it
> so I can't tell.

ipchains has been superceded by iptables in 2.4 kernels. iptables is
monsterously powerful -- we spend about as much time hacking iptables
as Erlang around here it seems.

The iptables documentation is also very good. You can find it at
http://www.netfilter.org/ if you're curious.

Cheers,
Luke