From owner-freebsd-questions@freebsd.org Fri Feb 26 07:33:47 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CC244AB487B for ; Fri, 26 Feb 2016 07:33:47 +0000 (UTC) (envelope-from terje@elde.net) Received: from rand.keepquiet.net (keepquiet.net [144.76.43.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "keepquiet.net", Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 979891C23 for ; Fri, 26 Feb 2016 07:33:47 +0000 (UTC) (envelope-from terje@elde.net) Received: from [10.96.74.209] (2.150.20.162.tmi.telenormobil.no [2.150.20.162]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: terje@elde.net) by rand.keepquiet.net (Postfix) with ESMTPSA id ABB46AD2; Fri, 26 Feb 2016 07:33:45 +0000 (UTC) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) Subject: Re: WhatsApp Calls through IPFilter - How do I allow? From: Terje Elde X-Mailer: iPhone Mail (13D20) In-Reply-To: Date: Fri, 26 Feb 2016 08:33:44 +0100 Cc: User Questions Content-Transfer-Encoding: quoted-printable Message-Id: <90E87888-152D-43BA-BBF5-E07EE72BBAA1@elde.net> References: To: Odhiambo Washington X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Feb 2016 07:33:47 -0000 > On 25 Feb 2016, at 12:04, Odhiambo Washington wrote: >=20 > I have a network where FreeBSD acts as the gateway. I use IPFilter as the > firewall. I'd really like to recommend looking into the pf-firewall in stead of ipfilt= er. The two are pretty similar, but pf is probably both generally a better c= hoice, and also has convenient logging via pflog. That would allow you to no= t only inspect logged traffic, but also filter the log, so you can narrow do= wn on blocked packets through or from a specific host for example.=20 Terje