From owner-freebsd-questions@FreeBSD.ORG Wed Apr 30 05:55:56 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3C4C737B401 for ; Wed, 30 Apr 2003 05:55:56 -0700 (PDT) Received: from nagual.st (cc20684-a.assen1.dr.home.nl [217.120.160.32]) by mx1.FreeBSD.org (Postfix) with ESMTP id 21E0C43FAF for ; Wed, 30 Apr 2003 05:55:55 -0700 (PDT) (envelope-from dick@nagual.st) Received: from lothlorien.nagual.st (dick@localhost [127.0.0.1]) by nagual.st (8.12.3/8.12.3/arwen) with ESMTP id h3UCrwKh013873; Wed, 30 Apr 2003 14:53:58 +0200 Received: (from dick@localhost) by lothlorien.nagual.st (8.12.3/8.12.3/local) id h3UCrwtI013871; Wed, 30 Apr 2003 14:53:58 +0200 From: dick hoogendijk Date: Wed, 30 Apr 2003 14:53:58 +0200 To: Toomas Aas Message-ID: <20030430125358.GA13632@lothlorien.nagual.st> References: <20030429170633.GA404@pooh.nagual.st> <200304291725.h3THPve03472@lv.raad.tartu.ee> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200304291725.h3THPve03472@lv.raad.tartu.ee> User-Agent: Mutt/1.3.28i cc: freebsd-questions Subject: Re: Isba X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Apr 2003 12:55:56 -0000 On 29 Apr Toomas Aas wrote: > Well, if you compile your kernel with IPFILTER_DEFAULT_BLOCK option > then the ipf.rules file of zero bytes is an example of very small but > very tight firewall :-) That is very true ;-) though not very conveniant.. > Since you didn't mention what you've already read I'd recommend the > IPFilter Howto: http://www.obfuscation.org/ipf/ Of course I visited this "mother of all places for ipf" I read and printed the how2, but although I learn al lot from, it is's confusing too in places. And when I compare some scripts from this how2 with a "very tight" ipf-firewall from my FreeBSD doc directory it gets only harder :-/ > That was the only site I needed when I set up my first IPFilter based > firewall and I think it's very good. It _IS_ very good. Maybe too good for me. I have not seen "the light" yet, but am sure it'll happen oneday.. -- dick -- http://www.nagual.st/ -- PGP/GnuPG key: F86289CE ++ Running FreeBSD 4.8 ++ Debian GNU/Linux (Woody)