From owner-freebsd-questions  Fri Feb  8 12:23:55 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from raiden.jasnetworks.net (raiden.jasnetworks.net [65.194.248.251])
	by hub.freebsd.org (Postfix) with ESMTP id 0E80B37B41E
	for <freebsd-questions@FreeBSD.ORG>; Fri,  8 Feb 2002 12:23:45 -0800 (PST)
Received: from works ([192.168.0.2])
	by raiden.jasnetworks.net (8.11.6/8.11.6) with ESMTP id g18KOmD07716
	for <freebsd-questions@FreeBSD.ORG>; Fri, 8 Feb 2002 15:24:49 -0500 (EST)
	(envelope-from raiden23@netzero.net)
Message-Id: <4.2.0.58.20020208152214.00986a40@pop.netzero.net>
X-Sender: raiden23@pop.netzero.net (Unverified)
X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.0.58 
Date: Fri, 08 Feb 2002 15:28:39 -0500
To: freebsd-questions@FreeBSD.ORG
From: Lord Raiden <raiden23@netzero.net>
Subject: Working Firewall in halt mode??
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

	I saw the following article today listed on Slashdot and found this 
interesting.

http://www.samag.com/documents/s=1824/sam0201d/0201d.htm

	I love the idea and I'd love to find out if this is possible in FreeBSD 
like it is in the Linux kernel.  Since I'm not familiar enough with the 
inner working of FreeBSD at this point as far as what the kernel and system 
can do in a situation like this, I'm wondering if those of you who do know 
the heart and core of FreeBSD might research this a bit and find out if 
this is doable in FreeBSD??

	Now also, would this require a kernel rebuild/compile to enable IPchains 
and IPFW support, or can you do this off a generic kernel?  Currently I 
have to recompile my kernel to enable both, but I'd be curious to know if 
this would be doable off of just a basic install and generic kernel, cause 
if it could be, that would make setting up a firewall not only simpler, but 
you could theoretically have one running in like 30-45 minutes rather than 
4-6 hours.  :)

	Thanks for the help guys.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message