From owner-freebsd-questions@FreeBSD.ORG Mon Jun 28 17:15:26 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C25FE16A4CE for ; Mon, 28 Jun 2004 17:15:26 +0000 (GMT) Received: from out003.verizon.net (out003pub.verizon.net [206.46.170.103]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4F03143D48 for ; Mon, 28 Jun 2004 17:15:26 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from [192.168.1.3] ([68.161.84.3]) by out003.verizon.net (InterMail vM.5.01.06.06 201-253-122-130-106-20030910) with ESMTP id <20040628171525.EXIF6671.out003.verizon.net@[192.168.1.3]>; Mon, 28 Jun 2004 12:15:25 -0500 Message-ID: <40E0522C.1010107@mac.com> Date: Mon, 28 Jun 2004 13:15:24 -0400 From: Chuck Swiger Organization: The Courts of Chaos User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040608 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Peter Zyumbilev References: <48864.194.39.131.39.1088403058.squirrel@194.39.131.39> In-Reply-To: <48864.194.39.131.39.1088403058.squirrel@194.39.131.39> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Authentication-Info: Submitted using SMTP AUTH at out003.verizon.net from [68.161.84.3] at Mon, 28 Jun 2004 12:15:25 -0500 cc: freebsd-questions@freebsd.org Subject: Re: firewall for web server X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Jun 2004 17:15:26 -0000 Peter Zyumbilev wrote: > Do you know some good tutorial for bulding firewall for FreeBSD as web > server. I found a lot of tutorials but for FreeBSD as router. First, are you building a firewall or a web server? If you're building a firewall, you don't want to run any services like WWW at all on the machine. If you're building a web server, you're probably not going to be routing traffic, no-- to corresponds to your second remark. > Some commented premade script with comments will also do the job. > I was plannding to use APF, but I am afarid to install it on FreeBSD > without good tutorial. APF? -- -Chuck