From owner-freebsd-questions@FreeBSD.ORG  Thu Jan 12 17:10:57 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: questions@freebsd.org
Delivered-To: freebsd-questions@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 639FA16A41F
	for <questions@freebsd.org>; Thu, 12 Jan 2006 17:10:57 +0000 (GMT)
	(envelope-from freebsd@philip.pjkh.com)
Received: from wolf.pjkh.com (wolf.pjkh.com [66.228.196.74])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A0C1643D86
	for <questions@freebsd.org>; Thu, 12 Jan 2006 17:10:54 +0000 (GMT)
	(envelope-from freebsd@philip.pjkh.com)
Received: from localhost (localhost [127.0.0.1])
	by wolf.pjkh.com (Postfix) with ESMTP id DBBA9172A5;
	Thu, 12 Jan 2006 09:10:52 -0800 (PST)
Received: from wolf.pjkh.com ([127.0.0.1])
	by localhost (wolf.pjkh.com [127.0.0.1]) (amavisd-new,
	port 10024) with ESMTP
	id 50601-06; Thu, 12 Jan 2006 09:10:52 -0800 (PST)
Received: by wolf.pjkh.com (Postfix, from userid 1000)
	id 4C79C172A4; Thu, 12 Jan 2006 09:10:52 -0800 (PST)
Received: from localhost (localhost [127.0.0.1])
	by wolf.pjkh.com (Postfix) with ESMTP id 469C8170B0;
	Thu, 12 Jan 2006 09:10:52 -0800 (PST)
Date: Thu, 12 Jan 2006 09:10:52 -0800 (PST)
From: Philip Hallstrom <freebsd@philip.pjkh.com>
To: Jim Freeze <jim@freeze.org>
In-Reply-To: <20060112163125.GA58992@freeze.org>
Message-ID: <20060112091036.U51550@wolf.pjkh.com>
References: <20060112163125.GA58992@freeze.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
X-Virus-Scanned: amavisd-new at pjkh.com
Cc: questions@freebsd.org
Subject: Re: Looking for SW Firewall
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jan 2006 17:10:57 -0000

> I am interested implementing a firewall in SW that has similar
> features as a Cisco PIX firewall. But, I don't want to roll
> my own ipfw statements. A nice gui would be nice. From the
> ports index I see things like:
>
>
> dante-1.1.15          A circuit-level firewall/proxy
> cp2fwb-0.6            Checkpoint FW1 to Firewall Builder ruleset converter
> fwbuilder-2.0.10      Firewall Builder GUI and policy compilers
> hlfl-0.60.1           High Level Firewall Language
> libfwbuilder-2.0.10_1 Firewall Builder API
> pfw-0.6.2             A web frontend for the pf firewall
>
> I'm basically looking for a good firewall that has an easy administration
> interface.
>
> Can someone who has experience with this suggest a fw I should try?

Never used it, but seems monowall comes up a lot...

http://www.m0n0.ch/wall/