From owner-freebsd-questions@FreeBSD.ORG Thu Oct 30 08:18:45 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DDACA106567E for ; Thu, 30 Oct 2008 08:18:45 +0000 (UTC) (envelope-from reko.turja@liukuma.net) Received: from www.liukuma.net (www.liukuma.net [62.220.235.15]) by mx1.freebsd.org (Postfix) with ESMTP id 997C28FC13 for ; Thu, 30 Oct 2008 08:18:45 +0000 (UTC) (envelope-from reko.turja@liukuma.net) Received: from localhost (unknown [127.0.0.1]) by www.liukuma.net (Postfix) with ESMTP id B08F51CC91; Thu, 30 Oct 2008 09:59:05 +0200 (EET) Received: from www.liukuma.net ([127.0.0.1]) by localhost (www.liukuma.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id wDYvHuIRvqLX; Thu, 30 Oct 2008 09:59:04 +0200 (EET) Received: from rivendell (a91-155-174-212.elisa-laajakaista.fi [91.155.174.212]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) (Authenticated sender: ignatz@www.liukuma.net) by www.liukuma.net (Postfix) with ESMTP id 861F11CC8D; Thu, 30 Oct 2008 09:59:01 +0200 (EET) Message-ID: From: "Reko Turja" To: , "Freebsd questions" References: <49090BA3.5090407@gmail.com> Date: Thu, 30 Oct 2008 09:59:58 +0200 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: quoted-printable X-Priority: 3 X-MSMail-Priority: Normal Importance: Normal X-Mailer: Microsoft Windows Live Mail 12.0.1606 X-MIMEOLE: Produced By Microsoft MimeOLE V12.0.1606 Cc: Subject: Re: Firewalls in FreeBSD? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Oct 2008 08:18:45 -0000 Hi Jack! > Right now I have a Windows machine a FreeBSD natd/firewall then a > cable modem. > This is working for web surfing. But I've been playing a lot of=20 > games > lately and it doesn't work at all (for multiplayer/internet=20 > games). As a fellow gamer, I've found that PF with stateful filtering has been=20 a good firewall for my needs. Usually with stateful ruleset the games=20 work out of the box, just when outgoing traffic is allowed and state=20 is kept. There are some special situations where PF shines though,=20 Asherons Call (or any other game using bidirectional UDP traffic) can=20 be made to work with following configuration: This to nat section: binat on $ext_if from to -> $ext_if Which should do the trick with some of the silly games out there using=20 standard defined, but really rare kind of traffic. -Reko=20