From owner-freebsd-pf@FreeBSD.ORG  Wed Mar 15 12:46:42 2006
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: freebsd-pf@freebsd.org
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7A88316A400
	for <freebsd-pf@freebsd.org>; Wed, 15 Mar 2006 12:46:42 +0000 (UTC)
	(envelope-from wash@wananchi.com)
Received: from ns2.wananchi.com (ns2.wananchi.com [62.8.64.4])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 853D943D48
	for <freebsd-pf@freebsd.org>; Wed, 15 Mar 2006 12:46:40 +0000 (GMT)
	(envelope-from wash@wananchi.com)
Received: from wash by ns2.wananchi.com with local (Exim 4.60 #0 (FreeBSD
	4.11-STABLE)) id 1FJVOf-000PIt-17 by authid <wash>
	for <freebsd-pf@freebsd.org>; Wed, 15 Mar 2006 15:46:37 +0300
Date: Wed, 15 Mar 2006 15:46:36 +0300
From: Odhiambo Washington <wash@wananchi.com>
To: freebsd-pf@freebsd.org
Message-ID: <20060315124636.GE78482@ns2.wananchi.com>
Mail-Followup-To: Odhiambo Washington <wash@wananchi.com>,
	freebsd-pf@freebsd.org
References: <441808C5.2020509@free.fr>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <441808C5.2020509@free.fr>
X-Disclaimer: Any views expressed in this message,
	where not explicitly attributed otherwise, are mine alone!.
X-Mailer: Mutt 1.5.11 (2005-09-15)
X-Designation: Systems Administrator, Wananchi Online Ltd.
X-Location: Nairobi, KE, East Africa.
User-Agent: Mutt/1.5.11
Subject: Re: PF conf
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Mar 2006 12:46:42 -0000

* On 15/03/06 13:29 +0100, David Vincent wrote:
| I want to setup a firewall using freebsd 5.4 with 3 zones:
| 
| EXTERNAL
| INTERNAL
| DMZ
| 
| I have a reverse proxy and mail/dns servers in the DMZ. The reverse 
| proxy forward requests  to servers in the internal zone.
| 
| I'm a newbie in PF configuration and I need some help in order to right 
| configure PF.
| 
| Many thanks in advance,
| 
| David.

If you are a newbie, then http://www.openbsd.org/faq/pf and google will
be good friends ;)
You have to craft rules by hand, one by one, after reading and googling.

What are you using currently though?


-Wash

http://www.netmeister.org/news/learn2quote.html

DISCLAIMER: See http://www.wananchi.com/bms/terms.php

--
+======================================================================+
    |\      _,,,---,,_     | Odhiambo Washington    <wash@wananchi.com>
Zzz /,`.-'`'    -.  ;-;;,_ | Wananchi Online Ltd.   www.wananchi.com
   |,4-  ) )-,_. ,\ (  `'-'| Tel: +254 20 313985-9  +254 20 313922
  '---''(_/--'  `-'\_)     | GSM: +254 722 743223   +254 733 744121
+======================================================================+

A fool's brain digests philosophy into folly, science into
superstition, and art into pedantry.  Hence University education.
		-- George Bernard Shaw