From owner-freebsd-questions@FreeBSD.ORG  Mon Jun 28 17:44:27 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 93B3116A4CE
	for <freebsd-questions@freebsd.org>;
	Mon, 28 Jun 2004 17:44:27 +0000 (GMT)
Received: from mail.hostmansion.com (hostmansion10.hostmansion.com
	[216.158.144.61])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 7607543D3F
	for <freebsd-questions@freebsd.org>;
	Mon, 28 Jun 2004 17:44:27 +0000 (GMT)
	(envelope-from peter@hostmansion.com)
Received: from bgsofx17 (www-1.bivol.net [193.108.24.73])
	by mail.hostmansion.com (Postfix) with SMTP
	id 1372E11C036; Mon, 28 Jun 2004 03:08:16 -0700 (PDT)
Message-ID: <00b401c45d37$8e346780$0201a8c0@bgsofx17>
From: "Peter" <peter@hostmansion.com>
To: "Chuck Swiger" <cswiger@mac.com>
References: <48864.194.39.131.39.1088403058.squirrel@194.39.131.39>
	<40E0522C.1010107@mac.com>
Date: Mon, 28 Jun 2004 20:44:23 +0300
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
cc: freebsd-questions@freebsd.org
Subject: Re: firewall for web server
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Jun 2004 17:44:27 -0000

I am budiling a web server.
Since it is ina remote data center wher I do not contrl the router I prefer
I to build firewall on the www server.

APF http://www.rfxnetworks.com/apf.php
very popular firewall in the linux world.

Thanks,

Peter


----- Original Message ----- 
From: Chuck Swiger
To: Peter Zyumbilev
Cc: freebsd-questions@freebsd.org
Sent: Monday, June 28, 2004 8:15 PM
Subject: Re: firewall for web server


Peter Zyumbilev wrote:
> Do you know some good tutorial for bulding firewall for FreeBSD as web
> server. I found a lot of tutorials but for FreeBSD as router.

First, are you building a firewall or a web server?

If you're building a firewall, you don't want to run any services like WWW
at
all on the machine.  If you're building a web server, you're probably not
going to be routing traffic, no-- to corresponds to your second remark.

> Some commented premade script with comments will also do the job.
> I was plannding to use APF, but I am afarid to install it on FreeBSD
> without good tutorial.

APF?

-- 
-Chuck