[ale] stateful firewall?

[Fletch]

>>>>> "John" == John Wells <jbwellsiv at yahoo.com> writes:

[...]

    John> Ok, final question.  Assuming NETFILTER is *not* ready for
    John> production, are there any open source stateful firewalls
    John> that are?


        The *BSD's ipf/ipnat stuff can keep state on connections (TCP
and UDP), and I'd bet the new OpenBSD pf can as well (but that's
relatively new and won't show up until the 3.0 release (due out
probably before the end of the year if the usual schedule is kept)).


-- 
Fletch                | "If you find my answers frightening,       __`'/|
fletch at phydeaux.org   |  Vincent, you should cease askin'          \ o.O'
770 933-0600 x211(w)  |  scary questions." -- Jules                =(___)=
                      |                                               U

---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.