From owner-freebsd-security Wed Apr 14 0:45:41 1999 Delivered-To: freebsd-security@freebsd.org Received: from quackerjack.cc.vt.edu (quackerjack.cc.vt.edu [198.82.160.250]) by hub.freebsd.org (Postfix) with ESMTP id 566D714ED5 for ; Wed, 14 Apr 1999 00:45:38 -0700 (PDT) (envelope-from jobaldwi@vt.edu) Received: from sable.cc.vt.edu (sable.cc.vt.edu [128.173.16.30]) by quackerjack.cc.vt.edu (8.8.8/8.8.8) with ESMTP id DAA10264; Wed, 14 Apr 1999 03:43:18 -0400 (EDT) Received: from john.baldwin.cx (jobaldwi.campus.vt.edu [198.82.67.63]) by sable.cc.vt.edu (8.8.8/8.8.8) with ESMTP id DAA27867; Wed, 14 Apr 1999 03:43:17 -0400 (EDT) Message-ID: X-Mailer: XFMail 1.3 [p0] on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <01BE8653.67C58CC0.thomas.uhrfelt@plymovent.se> Date: Wed, 14 Apr 1999 03:43:17 -0400 (EDT) From: John Baldwin To: Thomas Uhrfelt Subject: Re: IPFilter? Cc: "freebsd-security@freebsd.org" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On 14-Apr-99 Thomas Uhrfelt wrote: > > I already bought the 'Building Internet Firewalls' and its a good book, and > I got the theoretic side of building a firewall pretty much nailed down. > What I am missing is FreeBSD specific things + IPFilter/NAT things. I am > new to the FreeBSD community and can't find any good documentation covering > these. Neither is the IPFilter package filled with any "good" newcomer > docs. I really think IPFilter and IPNat should be covered in the handbook > since its a kernel option nowdays. > > Do you have any links for good FreeBSD+IPFilter pages? If you read the FAQ, and follow question 10.6. Does FreeBSD support NAT or Masquerading, it has a link to the natd manpage: http://www.freebsd.org/cgi/man.cgi?natd. The section "Running NATD" gives step by step instructions on getting NAT up and running. For manpages in general, you can go to http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+3.1-RELEASE I believe that you can use ipfw ('man ipfw' at the URL above) to do the same stuff as IPFilter. > Regards, > > Thomas Uhrfelt --- John Baldwin -- http://members.freedomnet.com/~jbaldwin/ PGP Key: http://members.freedomnet.com/~jbaldwin/pgpkey.asc "Power Users Use the Power to Serve!" - http://www.freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message