Comparison

From securityrouter.org, an OpenBSD-based firewall
Revision as of 07:54, 10 September 2012 by Erik (talk | contribs)
Jump to: navigation, search
Halon 3.0-p17 pfSense 2.0.1 m0n0wall 1.33  Vyatta 6.4 Mikrotik 5.20
Platform OpenBSD 5.0 FreeBSD 8.1 FreeBSD 6.4 Linux 3.0.23 Linux 2.6
Firewall PF (2011) PF (2007) ipfilter iptables iptables
Architecture Intel 32/64-bit Intel 32/64-bit Intel 32-bit Intel 32-bit Intel 32-bit
Management
Config format Clear-text XML XML Clear-text Semi-clear-text
Restore/rollback without reboot Yes No No No No
Test/confirm without reboot Yes No No No No
Revision-managed config Yes (SVN) Yes (files) No Yes No
Commit multiple changes Yes No No Yes No
CLI config editor Yes No No Yes Yes
VPN server
L2TP Yes Yes No Yes Yes
PPTP NAT passthrough Yes ? (Fricking) No Yes (iptables) Yes (iptables)
DNS suffix in PPTP/L2TP Yes No No No No
Filter-ID for RADIUS Yes No No No Yes
Routing
MPLS Yes (PE/VPN) No No No  Yes
Built-in OSPF/BGP Yes (OpenBGP/OSPFD) No No Yes (Quagga)  Yes
IPv6
Firewall rules Dual-stack Rule duplication Rule duplication Rule duplication Rule duplication
Others
Layer 7 load balancing Yes No No No ?
Re-arrange graphs Yes No No ? ?