*BSDThis forum is for the discussion of all BSD variants.
FreeBSD, OpenBSD, NetBSD, etc.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
I am going to connect to my FreeBSD server from school. I will only be using ssh/port 22 because that is the only outbound port the school keeps open on the segment of the network I'll be on. I have the ip range that my school uses for workstations. I have a router at my house so I will only need to forward port 22 to my BSD server. I dont need NAT or anything fancy. So seeing that port 22 is only going to be open and I know a range of ip's that are going to connect to my server, what is the best firewall setup for me?
I couldn't find anything good to help me with ipfw. It seemed pretty hard and way above what I needed. Having to compile ipfw options with kernel is what I was having trouble with. Pf seems like a lighter choice for what I want to do. Thanks for the help!
I was looking at building a FW. Then someone here told me about m0n0wall. You can download an ISO to run from a cdrom. The cdrom version won't over-write you existing HD if you don't want it to. It will load the entire FreeBSD OS/FW into RAM for testing.
AND...it is configureable from the LAN side via http...much like a Linksys broadband router. I did some quick vulnerability testing and it appears to be pretty secure.
If you don't like it, just shutdown and take out the cd.
Distribution: OpenBSD 4.6, OS X 10.6.2, CentOS 4 & 5
Posts: 3,660
Rep:
internet_net, external_addr, etc are generally macros (actually, you prefix them with $ ex: $internal_net). You must define them in your config file, most people do that at the top, such as:
internal_net=192.168.0.0/16
Then later you can refer to them, like
pass out on fxp1 from $internal_net
Have you read the PF User's Guide on the OpenBSD site? It does an extremely good job of explaining everything. For information on this specific question, look at the section entitled "Lists and Macros".
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.