LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Other *NIX Forums > *BSD
User Name
Password
*BSD This forum is for the discussion of all BSD variants.
FreeBSD, OpenBSD, NetBSD, etc.

Notices

Reply
 
LinkBack Search this Thread
Old 12-26-2004, 04:20 PM   #1
proton666
Member
 
Registered: Jan 2003
Distribution: FreeBSD 5.3
Posts: 35

Rep: Reputation: 15
Help choosing the right firewall


I am going to connect to my FreeBSD server from school. I will only be using ssh/port 22 because that is the only outbound port the school keeps open on the segment of the network I'll be on. I have the ip range that my school uses for workstations. I have a router at my house so I will only need to forward port 22 to my BSD server. I dont need NAT or anything fancy. So seeing that port 22 is only going to be open and I know a range of ip's that are going to connect to my server, what is the best firewall setup for me?
 
Old 12-26-2004, 05:09 PM   #2
Moy Easwaran
Member
 
Registered: Dec 2004
Distribution: Slackware, OpenBSD
Posts: 44

Rep: Reputation: 19
I'd use pf, which is OpenBSD's packet-filter that FreeBSD 5.3 also comes with. There's a howto at http://openbsd.org/faq/pf/index.html

It's quite straightforward, and the example in the howto should be enough to get you going.

Moy
 
Old 12-26-2004, 05:19 PM   #3
mrcheeks
Senior Member
 
Registered: Mar 2004
Location: far enough
Distribution: OS X 10.6.7
Posts: 1,690

Rep: Reputation: 50
any bsd firewall can do it. I used to use ipfw because i found it easy.

I am now using pf. I wanted to see if it was that good and easy to configure. I am very pleased with it.

whatever you choose you only allow ssh, you don't have to spend hours choosing one. pick one and try to configure it.
 
Old 12-26-2004, 05:28 PM   #4
proton666
Member
 
Registered: Jan 2003
Distribution: FreeBSD 5.3
Posts: 35

Original Poster
Rep: Reputation: 15
I couldn't find anything good to help me with ipfw. It seemed pretty hard and way above what I needed. Having to compile ipfw options with kernel is what I was having trouble with. Pf seems like a lighter choice for what I want to do. Thanks for the help!
 
Old 12-27-2004, 08:37 AM   #5
proton666
Member
 
Registered: Jan 2003
Distribution: FreeBSD 5.3
Posts: 35

Original Poster
Rep: Reputation: 15
I am having a tough time with the config of pf. Like what does internal_net, external_addr, #ext_if="ext0", #int_if="int0" mean?
 
Old 12-27-2004, 04:50 PM   #6
24jedi
Member
 
Registered: Jul 2003
Location: Richmond, VA
Distribution: FreeBSD 5.4
Posts: 75

Rep: Reputation: 15
This may not be what you are looking for, but I'll post anyway.

http://m0n0.ch/wall/

I was looking at building a FW. Then someone here told me about m0n0wall. You can download an ISO to run from a cdrom. The cdrom version won't over-write you existing HD if you don't want it to. It will load the entire FreeBSD OS/FW into RAM for testing.

AND...it is configureable from the LAN side via http...much like a Linksys broadband router. I did some quick vulnerability testing and it appears to be pretty secure.

If you don't like it, just shutdown and take out the cd.
 
Old 12-28-2004, 07:45 PM   #7
chort
Senior Member
 
Registered: Jul 2003
Location: Silicon Valley, USA
Distribution: OpenBSD 4.6, OS X 10.6.2, CentOS 4 & 5
Posts: 3,660

Rep: Reputation: 69
internet_net, external_addr, etc are generally macros (actually, you prefix them with $ ex: $internal_net). You must define them in your config file, most people do that at the top, such as:
internal_net=192.168.0.0/16
Then later you can refer to them, like
pass out on fxp1 from $internal_net

Have you read the PF User's Guide on the OpenBSD site? It does an extremely good job of explaining everything. For information on this specific question, look at the section entitled "Lists and Macros".
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Help choosing a distro BrokenBrick Linux - Distributions 2 12-07-2005 03:45 PM
Firewall/Server setup & choosing questions adrenaline_NZ Linux - Networking 2 10-13-2004 04:19 PM
Help choosing the best app?? sonaht Linux - Software 8 08-24-2004 04:09 PM
Help choosing (there's to many) SevenForever Linux - Newbie 9 04-11-2004 04:13 PM
Choosing the Best Python gamehack Programming 2 04-05-2004 04:56 PM


All times are GMT -5. The time now is 07:23 PM.

Main Menu
 
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: @linuxquestions
Open Source Consulting | Domain Registration