Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 19 Dec 2008 05:47:36 +0300
From:      Jeff Laine <wtf.jlaine@gmail.com>
To:        KHOO Guan Chen <khoogc@singnet.com.sg>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: bridge ipfw also protect set
Message-ID:  <20081219024736.GA1513@free.bsd.loc>
In-Reply-To: <20081219020810.GA60027@localhost.gateway.2wire.net>
References:  <20081219020810.GA60027@localhost.gateway.2wire.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Dec 19, 2008 at 10:08:10AM +0800, KHOO Guan Chen wrote:
> Hi
> 
> I want to give internet connectivity to a pc behind my Freebsd, which is 
> connected to an aDSL. I know I can add another card to my set and use 
> bridge+IPFW so that the behind pc is firewalled. But will this setup
> also ensure that my Freebsd set is firewalled? Could now figure it out
> reading the book and article.
> 
> Thanks and sorry if this is a silly question.
> 
> Regards

Hi there!
You can set up natd+IPFW or use pf only. I think bridging is not necessary in your case.
Proper filter rules will give your freebsd system good protection.

Some information could be found in the Firewalls chapter of the Handbook:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html

Great explanation of pf functionality here:
http://www.openbsd.org/faq/pf/

I find pf approach much easier to set up and maintain.

Google search will give you more ;)

Good luck!


-- 
Best regards,
Jeff

() X-mas ribbon campaign
/\




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20081219024736.GA1513>