is ipfw really that bad?

[mkwan]

I was at macrumors forum site and I read a rather disturbing opinion on ipfw

Actually Apples Firewall is based on ipfw.... Which noone who had any sense would use either... It is a buggy implementation that has been dropped from most unix/linux except for open bsd distributions due to its numerous weaknesses.

here is the link:
http://forums.macrumors.com/showthread.php?s=&threadid=84462

 

[scruffy]

It's bogus - that poster is confused.

The current firewall in FreeBSD is the same ipfw as OS X uses (not OpenBSD, as he states - besides, OpenBSD is the most security-paranoid of probably all the free OS's), and it's just fine.

The firewall in some old Linux kernels was sometimes referred to as ipfw - but it's a completely different set of software than the FreeBSD firewall, just happens to have the same name.

One thing they're right about - Apple's firewall GUI is so bad as to be insulting. Apple should be embarassed to release something that craptacular...