From owner-freebsd-questions@FreeBSD.ORG Thu Jan 12 16:26:43 2006 Return-Path: X-Original-To: questions@freebsd.org Delivered-To: freebsd-questions@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1B9DD16A41F for ; Thu, 12 Jan 2006 16:26:43 +0000 (GMT) (envelope-from jfreeze@freeze.org) Received: from freeze.org (www.freeze.org [67.78.64.219]) by mx1.FreeBSD.org (Postfix) with ESMTP id BAB9943D55 for ; Thu, 12 Jan 2006 16:26:42 +0000 (GMT) (envelope-from jfreeze@freeze.org) Received: from freeze.org (localhost [127.0.0.1]) by freeze.org (8.12.10/8.12.10) with ESMTP id k0CGVQmv059105 for ; Thu, 12 Jan 2006 11:31:26 -0500 (EST) (envelope-from jfreeze@freeze.org) Received: (from jfreeze@localhost) by freeze.org (8.12.10/8.12.10/Submit) id k0CGVPqx059104 for questions@freebsd.org; Thu, 12 Jan 2006 11:31:25 -0500 (EST) (envelope-from jfreeze) Date: Thu, 12 Jan 2006 11:31:25 -0500 From: Jim Freeze To: questions@freebsd.org Message-ID: <20060112163125.GA58992@freeze.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.1i Cc: Subject: Looking for SW Firewall X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jan 2006 16:26:43 -0000 Hi I am interested implementing a firewall in SW that has similar features as a Cisco PIX firewall. But, I don't want to roll my own ipfw statements. A nice gui would be nice. From the ports index I see things like: dante-1.1.15 A circuit-level firewall/proxy cp2fwb-0.6 Checkpoint FW1 to Firewall Builder ruleset converter fwbuilder-2.0.10 Firewall Builder GUI and policy compilers hlfl-0.60.1 High Level Firewall Language libfwbuilder-2.0.10_1 Firewall Builder API pfw-0.6.2 A web frontend for the pf firewall I'm basically looking for a good firewall that has an easy administration interface. Can someone who has experience with this suggest a fw I should try? Thanks -- Jim Freeze