From owner-freebsd-net@FreeBSD.ORG  Sat Apr 28 12:32:38 2007
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id B6A7616A400
	for <freebsd-net@freebsd.org>; Sat, 28 Apr 2007 12:32:38 +0000 (UTC)
	(envelope-from jackbarnett@gmail.com)
Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.176])
	by mx1.freebsd.org (Postfix) with ESMTP id 7407F13C45E
	for <freebsd-net@freebsd.org>; Sat, 28 Apr 2007 12:32:38 +0000 (UTC)
	(envelope-from jackbarnett@gmail.com)
Received: by py-out-1112.google.com with SMTP id f31so1054527pyh
	for <freebsd-net@freebsd.org>; Sat, 28 Apr 2007 05:32:37 -0700 (PDT)
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta;
	h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type;
	b=LlpmkEYCXqiHXS6QtKOV13xRQFeAUXMgy8Nwn0oesQgfhHOoBVFq3DxhyLhAtPSeWGaXWRmM0+W8RVOvEo6zeJ69/mreh4lCyJZ15ZtI/o0JG3RJbcwdXvkGNX4gf1rv+ZDXOPBPq9xqbUqzG+zdGvXRqr6/lerl8fPNhXfDGsI=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta;
	h=received:message-id:date:from:to:subject:mime-version:content-type;
	b=FnuRtj4rQ4XPjh90TsLLv/SVKYrQiHjnM/jJ3nY2UgiBSLN6wSFTxKsmaGBbC0eqvB+dxdI19G9XZWvURJ4Nen94qyYXk26QYyc0Ld1/yv+nwX3kB/2s8+2kCR6VDo3l2KkH1DFUYPx6e5Sgvr4Z+lSBdPKw9v+89UjkFIrtfxg=
Received: by 10.35.62.19 with SMTP id p19mr7238827pyk.1177762098214;
	Sat, 28 Apr 2007 05:08:18 -0700 (PDT)
Received: by 10.35.19.18 with HTTP; Sat, 28 Apr 2007 05:08:18 -0700 (PDT)
Message-ID: <dedb607c0704280508nf2c071dh2f76967999f68696@mail.gmail.com>
Date: Sat, 28 Apr 2007 07:08:18 -0500
From: "Jack Barnett" <jackbarnett@gmail.com>
To: freebsd-net@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: Firewall
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 28 Apr 2007 12:32:38 -0000

Hi,

I'm running FreeBSD 6.2 and setting it up as a network router/firewall.

It has 3 nics, two of internal network (one is wireless, other is LAN) and
third is to the internets.

I plan on using NAT so both internal networks can get to the internets.

In the FreeBSD documentation I see there are 3 firewalls, IPFIREWALL,
IPFILTER and PF (BF?).   I just need to do basic filtering and just a few
port forwards.  Nothing to fancy.  Which one would be recommended?

Also some time ago, I seen that there was a graphical tool for doing
firewall rules and would output into different formats.  Anyone know what
that tools is called? (ie. just a little app that outputs a text file
depending on what firewall you select as the option).

Thanks!