No more ipfw1

Sepherosa Ziehau has removed IPFW1; IPFW2, which is already in the system, is generally compatible from a configuration point of view.  Check the ipfw man page to find out what’s different.

Posted by     Categories: Committed Code     3 Comments
3 Comments on No more ipfw1


  1. Anonymous says:

    What I don’t get is why ipfw2 wasn’t removed too, pf is the sexy firewall these days.

  2. justin says:

    IPFW2 offers some features that pf does not, like (I think) dummynet. Also, having IPFW2 in the system doesn’t keep you from using PF.

  3. Captain Sonic says:

    Obviously there are many differences between the two, there isn’t a “best firewall”, it all depends from what you need.
    You can find a little but interesting overview here: