From owner-freebsd-questions@FreeBSD.ORG Fri Apr 1 15:58:01 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A378B16A4CE for ; Fri, 1 Apr 2005 15:58:01 +0000 (GMT) Received: from rproxy.gmail.com (rproxy.gmail.com [64.233.170.192]) by mx1.FreeBSD.org (Postfix) with ESMTP id BD6F343D48 for ; Fri, 1 Apr 2005 15:58:00 +0000 (GMT) (envelope-from perikillo@gmail.com) Received: by rproxy.gmail.com with SMTP id a41so684185rng for ; Fri, 01 Apr 2005 07:57:58 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:references; b=gBnq2VVAT+PBFHAnhZ/RScm+H5IworVMwa0Wj+R6OXTe/OJWgR7eMLhm0l6PwU7yBUAU5gbaBOQi/5OPSk7K+ufN+o5HLsygKJ1SXuvzL1U1FvZcPZCGSszxVGDxD252Hk9cKWz6ECfWpOlaKhtpAU+7nPvT2kbhuWqwImHSEf0= Received: by 10.38.151.1 with SMTP id y1mr2904221rnd; Fri, 01 Apr 2005 07:57:57 -0800 (PST) Received: by 10.38.98.28 with HTTP; Fri, 1 Apr 2005 07:57:57 -0800 (PST) Message-ID: <51d7a5160504010757346a146@mail.gmail.com> Date: Fri, 1 Apr 2005 07:57:57 -0800 From: perikillo To: freebsd-questions@freebsd.org In-Reply-To: <3831.216.220.59.169.1111611800.squirrel@216.220.59.169> Mime-Version: 1.0 References: <20050323204710.56664.qmail@web30202.mail.mud.yahoo.com> <3831.216.220.59.169.1111611800.squirrel@216.220.59.169> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.1 Subject: Re: Firewall questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: perikillo List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Apr 2005 15:58:01 -0000 Only a little note about the comment: "On FreeBSD you have a choice of IPFW, IPF, and PF. IPFW is FreeBSD only, IPF runs on many OSes (but not Linux)," Since i have been reading the Ipfilter maillist, you can see that Ipfilter = now=20 runs on Linux too. This is only information. Greetings. On Mar 23, 2005 1:03 PM, Ean Kingston wrote: >=20 > > I have been looking for a great firewall, something > > not too technical, since I have only been using > > FreeBSD for two months now. > > > > I have FreeBSD-4.8 installed, Apache-1.3, and > > Netqmail-1.05. I am also planning on running an NTP > > time server and possibly a forum in the future. The > > web site is expected to become a well-recognized site, > > so that complicates matters. More attention to the > > site means more attacks. >=20 > If it's a firewall you might want to upgrade to the latest in the series > you are using (4.11). There may be security holes in 4.8 by now. >=20 > > Also, I am looking for antiviral protection for both > > the FreeBSD server, and any Windows or Macintosh > > systems that may be using the POP mail. I know qmail > > has one solution, which was contributed by a qmail > > user, but what are the alternatives? >=20 > There are very few anti-virus packages for FreeBSD. AFAIK there are no > viruses that target FreeBSD. There are a few that target x86 hardware but > these don't propagate over the 'net. >=20 > Have a look at amavis (it's in the ports collection). I've never used it > but it's been mentioned a number of times on various lists. >=20 > Also, F-Prot (www.f-prot.com ) provides an AV=20 product for FreeBSD (NetBSD, > and OpenBSD too). They even have a mail scanner product. I used the file > scanner for a while but stopped the last time I upgraded the OS. >=20 > > > > Any suggestions as to what firewall would provide me > > with the best protection, while not being overly too > > complicated? >=20 > For simplicity, get one of the Firewall Router devices and stick your > FreeBSD system behind it. Most have a web interface to manage them. Just > make sure you get the Firewall model and not the Router with NAT model. > Unless you get lucky, the guy a Best Buy (or whereever) won't have a clue > about the differences and will not be able to help even if he thinks he i= s > helping. You need to do your research on this. >=20 > On FreeBSD you have a choice of IPFW, IPF, and PF. IPFW is FreeBSD only, > IPF runs on many OSes (but not Linux), and PF is a port of the OpenBSD > firewall. All are included with the FreeBSD distribution but require a > kernel recomple (it's explained in the handbook and isn't nearly as scary > as it sounds). All are about a complicated to configure/manage. >=20 > -- > Ean Kingston > E-Mail: ean_AT_hedron_DOT_org > PGP KeyID: 1024D/CBC5D6BB > URL: http://www.hedron.org/ >=20 >=20 > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " freebsd-questions-unsubscribe@freebsd.org" >