Re: converting ipf rules to pf rules...are there any tools

[Ben Goren <ben_(_at_)_trumpetpower_(_dot_)_com>]

On Fri, Nov 01, 2002 at 11:40:01PM -0600, taproot420 wrote:

> can  PF do  everything  that I  am  used  to in  IPF  and is  it
> considered mature enough for large production networks?

Yes. And more.

> 2. Will  PF  perform  well  on   old  hardware  like  IPF?   For
> ex.... One of my  IPF bridges is running on an  old 266mhz pent.
> with 256meg. ram and this is filtering a 100mbps link.

Heh...you think that's old....

I've got a  couple P133s with 16 Mbytes RAM  in my home network. I
have no trouble saturating the 100 MB full-duplex links. Actually,
the computers do a better job keeping up than my cheap switches.

The only  reason the P133s  replaced 486s  was that I  had trouble
getting  OpenBSD to  recognize the  old  ISA network  cards and  I
couldn't find any 100 MB ISA NICs.

Heck, your computer is more than twice as powerful as my laptop.

This  is all  on OpenBSD  3.0, too  (patched, of  course). I'll be
upgrading over the coming weeks when I feel bored.

Cheers,

b&

--
Ben Goren
 mailto:ben_(_at_)_trumpetpower_(_dot_)_com
 http://www.trumpetpower.com/
 icbm:33o25'37"N_111o57'32"W

[demime 0.98d removed an attachment of type application/pgp-signature]