Guide to OpenBSD Packet Filtering Firewalls

Contributed by jose on 2002-11-25 from the PF-for-newbies dept.

creining was the first to send us this one:

"There is an article http://www.kuro5hin.org/story/2002/11/23/14927/477 over at kuro5hin that explains how to set up a firewall utilizing OpenBSD. It is geared towards people with little UNIX background. Lots of links in this one! "

I had a look at this last night, and it is a good introduction for people who use OpenBSD and PF as a firewall (which is a lot of people who normally don't use OpenBSD, or even UNIX). Well done!

(Comments are closed)

Comments

By dmp () on 2002-11-25 02:27

The layout and depth of content stinks, but maybe it's just me...
Comments
1. By Shane J Pearson () on 2002-11-25 08:50
  
  The layout and depth of content stinks, but maybe it's just me...
  
  I've found lots of negative views on Deadly regarding various guides.
  
  Have you written a good guide? Seriously, if you can see where they're wrong and can do better, then please do.
  
  You and your guide will be most appreciated.
By Noob () on 2002-11-25 02:56

I thought that was very good. I am the type of person who prefers a whole lot of information bunched together. Having the links to all the aspects of the article was nice too I thought.
By Anonymous Coward () on 2002-11-25 05:29

Personally I got help from:

www.screamingelectron.org/phpBB2/

They did a good job helping me out.
By Anonymous Coward () on 2002-11-25 18:03

the part where it says To disable pf 'pfctl -e ...' it should read to enable.
By marcbey () info@marcbey.de on 2002-11-25 21:09 mailto:info@marcbey.de

im too lazy(maybe stupid) to learn rulesets, but i believe in openBSD security. so i installed an ruleset from http://real.ath.cx/BSDinstall.html which seems also quite good. i modified it for 3.2, but when i do an security check from eg. http://scan.sygatetech.com/quickscan.html i only get closed ports. Why?

marc
Comments
1. By Anonymous Coward () on 2002-11-26 06:20
  
  You answered your own question in the first 3 words of your sentence.
  Believing in OpenBSD security also means believing in reading, working, learning, working, growing, working, being proactive, working.
  Laziness falls outside of the scope of OpenBSD.
2. By Anonymous Coward () on 2002-11-27 16:33
  
  Your ISP may have everything firewalled off to the outside world.
  
  (I tried something very similar to what you did.)

Latest Articles

Sun, Aug 25
- 09:13 rpki-client 9.2 released (0)
Sat, Aug 24
- 11:46 No unmodified files remain from original import of OpenBSD (0)
Wed, Aug 14
- 20:39 Game of Trees 0.102 released! (0)
- 05:31 The BSDCan 2024 Playlist is now complete (0)
Thu, Aug 08
- 09:26 OpenBSD -current moves to 7.6-beta (1)
Mon, Jul 29
- 12:27 Possible future vmm(4)/vmd(8) on arm64 (1)
Sat, Jul 27
- 11:05 UDP parallel input committed to -current (0)
Wed, Jul 24
- 05:28 Incoming: UDP parallel input (1)
Sun, Jul 21
- 16:54 Libva's VA-API (Video Acceleration API) imported into xenocara (3)

Credits

Copyright © 2004-2008 Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to April 2nd 2004 as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]