From owner-freebsd-questions@FreeBSD.ORG Wed Mar 3 12:29:35 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 078D516A4CE for ; Wed, 3 Mar 2004 12:29:35 -0800 (PST) Received: from spock.ste-land.com (spock.ste-land.com [64.32.179.40]) by mx1.FreeBSD.org (Postfix) with ESMTP id D489B43D31 for ; Wed, 3 Mar 2004 12:29:34 -0800 (PST) (envelope-from ste@ste-land.com) Received: from ste-land.com (bgp377940bgs.plnfld01.nj.comcast.net [68.36.5.198]) by spock.ste-land.com (Postfix) with ESMTP id 34CF72D24C for ; Wed, 3 Mar 2004 15:29:34 -0500 (EST) Message-ID: <4046402D.6030101@ste-land.com> Date: Wed, 03 Mar 2004 15:29:33 -0500 From: "Shaun T. Erickson" User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4b) Gecko/20030507 X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: My ipfilter rules. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Mar 2004 20:29:35 -0000 I've ported my iptables firewall rules to ipfilter. Since I'm new to firewalling under any *BSD, and because it never hurts to get a review, I was wondering if some of you, who are good at, would critique my rules. Rather than include the file here, I give a link to it, below. Feel free to critique both content and form. Note that I obfuscated my server's IP address in the one place it shows up. The firewall is to harden a stand-alone server, with a single interface. Policy is to let anything out, but be cautious about what is allowed in. Here's the file: http://www.ste-land.com/rules.html I'm sure I'll learn more, based on your responses. TIA. -ste