[ILUG] Firewalls... linux -v- BSD

[Nick Murtagh]

Lisa Muir wrote:
> I don't know what I'm missing though... its like there's an inherent
> understanding in the BSD world that pf is front line ready and a valid
> professional solution to put into say a datacenter and I don't ever
> get a similar feeling from the linux world. How many people here run
> iptables as the front line of defence in a datacenter?

We used to run iptables / shorewall, no problems at all, the only reason
we switched to OpenBSD was for the ha setup. To be honest they are much
of a muchness unless you need some feature that only one provides.