<HTML><BODY>
<br>after quick search in google:<br><br>http://postfactum.pl.ua/pf/<br><br>I will test to patch latest linux kernel with pf.<br>What do you thing?<br><centos@linuxpowered.net><br> >sadas sadas wrote:<br> ><br> >> I can't find information is there linux or BSD distribution with effective<br> >> firewall that uses optimized algorithm to store hundreds of IPs and to<br> >> forward huge traffic. Any idea?<br> ><br> >Hundreds?<br> ><br> >http://www.openbsd.org/faq/pf/tables.html<br> ><br> >"A table is used to hold a group of IPv4 and/or IPv6 addresses. Lookups<br> >against a table are very fast and consume less memory and processor time<br> >than lists. For this reason, a table is ideal for holding a large group of<br> >addresses as the lookup time on a table holding 50,000 addresses is only<br> >slightly more than for one holding 50 addresses. Tables can be used in the<br> >following ways:<br> ><br> > * source and/or destination address in filter, NAT, and redirection rules.<br> > * translation address in NAT rules.<br> > * redirection address in redirection rules.<br> > * destination address in route-to, reply-to, and dup-to filter rule<br> >options."<br> ><br> >nuff said ?<br> ><br> >I love linux, I've been using it for almost 15 years now, I absolutely<br> >hate iptables(and ipchains, and ipfwadm). By contrast I absolutely<br> >hate everything about OpenBSD except for pf(which I love, ipfw and<br> >ipf aren't too bad either, at least for the era), so I use OpenBSD<br> >for firewalls, and linux for everything else.<br> ><br> >nate<br> ><br> ><br> >_______________________________________________<br> >CentOS mailing list<br> >CentOS@centos.org<br> >http://lists.centos.org/mailman/listinfo/centos<br> > </centos@linuxpowered.net></BODY></HTML>