Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 3 Mar 1997 09:32:12 -0800 (PST)
From:      "Eric J. Schwertfeger" <ejs@bfd.com>
To:        Brandon Gillespie <brandon@cold.org>
Cc:        freebsd-questions@FreeBSD.org
Subject:   Re: /etc/sysconfig for firewall?
Message-ID:  <Pine.BSF.3.95.970303092613.5225A-100000@harlie.bfd.com>
In-Reply-To: <Pine.NEB.3.95.970303095416.15953A-100000@cold.org>

next in thread | previous in thread | raw e-mail | index | archive | help


On Mon, 3 Mar 1997, Brandon Gillespie wrote:

> What options need to be on/off for a firewall?  do I define a default
> gateway?  what is it?  I know I turn on 'firewall'--do I set a routing
> daemon?

1: recompile a kernel with "options IPFIREWALL"
2: edit /etc/sysconfig for the following lines
	firewall=YES
	gateway=YES
3: edit /etc/rc.firewall to comply with your security plan.
4: reboot, and test thoroughly.  best done at the console, in case you
missed something and can now no longer get into the machine (I did that
once on a machine 2000 miles away).

step 2 assumes static routing, which I prefer on firewalls.  If you need
to use dynamic routing, rather than setting gateway to yes, you'll set
router to the type of router you plan on using.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95.970303092613.5225A-100000>