From owner-freebsd-questions  Wed Sep  5  4:13:13 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from femail29.sdc1.sfba.home.com (femail29.sdc1.sfba.home.com [24.254.60.19])
	by hub.freebsd.org (Postfix) with ESMTP id 4347137B40D
	for <freebsd-questions@FreeBSD.ORG>; Wed,  5 Sep 2001 04:13:09 -0700 (PDT)
Received: from x1-6-00-50-ba-de-36-33.kico1.on.home.com ([24.141.119.162])
          by femail29.sdc1.sfba.home.com
          (InterMail vM.4.01.03.20 201-229-121-120-20010223) with ESMTP
          id <20010905111308.YKIN15592.femail29.sdc1.sfba.home.com@x1-6-00-50-ba-de-36-33.kico1.on.home.com>;
          Wed, 5 Sep 2001 04:13:08 -0700
Received: from localhost (genisis@localhost)
	by x1-6-00-50-ba-de-36-33.kico1.on.home.com (8.11.3/8.11.3) with ESMTP id f85BIGO23143;
	Wed, 5 Sep 2001 07:18:16 -0400 (EDT)
	(envelope-from genisis@istar.ca)
X-Authentication-Warning: x1-6-00-50-ba-de-36-33.kico1.on.home.com: genisis owned process doing -bs
Date: Wed, 5 Sep 2001 07:18:15 -0400 (EDT)
From: Dru <genisis@istar.ca>
X-X-Sender:  <genisis@x1-6-00-50-ba-de-36-33.kico1.on.home.com>
To: Big B <tiffany@crshjnke.com>
Cc: questions <freebsd-questions@FreeBSD.ORG>
Subject: Re: easy firewall option for 1 NIC machine?
In-Reply-To: <POEHKNGEFCLPFPNOFOEOIEDACJAA.tiffany@crshjnke.com>
Message-ID: <20010905071554.Q23133-100000@x1-6-00-50-ba-de-36-33.kico1.on.home.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG



On Tue, 4 Sep 2001, Big B wrote:

> I have been reading and reading and reading...
> but all of the tute and examples show people using
> FBSD as gateway/firewall/natd...
> I am looking to kill off certain ports and ICMP attacks
> on a machine with one network card.
> I need to keep open ssh ftp www and several high ports for
> CS server without extreme cpu usage..
>
> Can anyone point me in the right direction..
>
> IPFW seems the correct way to go but the man pages do not help.


Hi Kenny,

If you're still looking for some tutorial-style stuff, you might find:

www.onlamp.com/pub/ct/15

to be helpful.  The IPFW stuff goes from April 25-July 5.

Cheers,

Dru


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message