Installing IPFILTER question

satimis · 05-21-2004, 06:41 AM

Hi folks,

FreeBSD 5.2
===========

I tried to install and run IPFILTER but met with following problems;

# which ipfilter
ipfilter: Command not found.

# whereis ipfilter
ipfilter: /usr/src/contrib/ipfilter
# ls /usr/share/examples/ | grep ipfilter
ipfilter

# pkg_info | grep -i ipfilter
No printout

# cd /usr/ports/
# make search -i name=ipfilter
# make search name=ipfilter
Both with no printout

# ee /usr/src/sys/conf/NOTES, searchig for 'IPFILTER' and found follows;

Code:

options         MROUTING                # Multicast routing
options         PIM                     # Protocol Independent Multicast
options         IPFIREWALL              #firewall
options         IPFIREWALL_VERBOSE      #enable logging to syslogd(8)
options         IPFIREWALL_VERBOSE_LIMIT=100    #limit verbosity
options         IPFIREWALL_DEFAULT_TO_ACCEPT    #allow everything by default
options         IPV6FIREWALL            #firewall for IPv6
options         IPV6FIREWALL_VERBOSE
options         IPV6FIREWALL_VERBOSE_LIMIT=100
options         IPV6FIREWALL_DEFAULT_TO_ACCEPT
options         IPDIVERT                #divert sockets
options         IPFILTER                #ipfilter support
options         IPFILTER_LOG            #ipfilter logging
options         IPFILTER_DEFAULT_BLOCK  #block all packets by default
options         IPSTEALTH               #support for stealth forwarding
options         PFIL_HOOKS              #required by IPFILTER
options         TCPDEBUG

Kindly advise how to install IPFILTER and/or edit kernel option to enable it.

TIA

B.R.
satimis

twilli227 · 05-21-2004, 09:50 PM

Did you check out the handbook here
10.8.3 Enabling IPFW on FreeBSD
http://www.freebsd.org/doc/en_US.ISO...firewalls.html

2.3.2 Kernel Configuration
http://www.freebsd.org/doc/en_US.ISO...#KERNEL-CONFIG

5amYan · 05-22-2004, 02:36 PM

add
options IPFILTER
options IPFILTER_LOG
options PFIL_HOOKS

to kernel
build and install kernel.
create filter rules in file I keep it in /etc named ipf.conf
then to insert rules
#ipf -f /etc/ipf.conf

to flush all rules
ipf -Fa