IPfilter and TCP wrappers

[Nivesh Patnaik]

I understand that IPFilter can be configured
to log allowed and blocked IPs and ports. TCP Wrappers can be configured to log allowed and blocked IPs.
What is the use for TCP Wrappers (other than customizing how to react to an attempt), if IPFilter already does the same?

Resource wise, is it less taxing on a system
to process an attempt using IPFilter than it is
with TCP Wrappers?

[Biswajit Tripathy]

IPFilter is a system firewall; so it does a lot more
than TCP wrapper.

I have not done any performance check comparison
between TCP wrapper and IPFilter. IPFilter goes in as
a streams module into the networking stack; so it
does have a little performance impact. Don't know
how it compares to TCP wrapper.

Another difference is, IPFilter is part of HP-UX and
hence supported by HP :-)

- Biswajit