Re: HOWTO - Choose SUN hardware to replace PC/Intel hardware

[Henning Brauer <lists-openbsd@bsws.de>]

On Sun, Jun 02, 2002 at 12:44:44PM -0700, Chuck Yerkes wrote:
> I like my little Soekris box - running NetBSD or OpenBSD on my whims.
> Lovely firewall (uses ipfilter).  It can handle a T1 easy.  

All general statements are wrong, including this one.
wether it can handle a T1 or not isn't the question. I promise, as least as
long as it runs ipfilter, it won't be able to handle 1.5 MBit/s of my
traffic with my ruleset requirements.
well, with pf, you have a chance ;-)

btw... anyone left questioning pf's matureness?

$ sudo pfctl -si
Status: Enabled  Time: 1023055571  Since: 1017671773  Debug: Urgent
[snip]
pf Counters
state searches            27902444485
state inserts             211198613
state removals            211185536
Counters
match                     13406947087
bad-offset                0       
fragment                  9847    
short                     1018    
normalize                 35979   
memory                    0       

3.0-stable with pf near-3.1.

-- 
http://2suck.net/hhwl.html
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)