From owner-freebsd-isp  Sun Mar 30 17:04:59 1997
Return-Path: <owner-isp>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id RAA29208
          for isp-outgoing; Sun, 30 Mar 1997 17:04:59 -0800 (PST)
Received: from panda.hilink.com.au (panda.hilink.com.au [203.2.144.5])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id RAA28777
          for <freebsd-isp@freebsd.org>; Sun, 30 Mar 1997 17:00:22 -0800 (PST)
Received: (from danny@localhost) by panda.hilink.com.au (8.8.5/8.7.3) id LAA21717; Mon, 31 Mar 1997 11:19:39 +1000 (EST)
Date: Mon, 31 Mar 1997 11:19:38 +1000 (EST)
From: "Daniel O'Callaghan" <danny@panda.hilink.com.au>
To: Rob van Oostveen <oostveen@euronet.nl>
cc: "'freebsd-isp@freebsd.org'" <freebsd-isp@freebsd.org>
Subject: Re: Firewall
In-Reply-To: <01BC3D15.1D07F6C0@fax-server>
Message-ID: <Pine.BSF.3.91.970331111720.18394E@panda.hilink.com.au>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-isp@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk



On Sun, 30 Mar 1997, Rob van Oostveen wrote:

> Does anyone have an advise for me on how to secure a Web site/LAN
> with FreeBSD. I.e. which Firewall package to use or where to find additional
> info about this subject in particular ? 

For a basic packet filtering package, build your kernel with 
options IPFIREWALL
options IPFIREWALL_VERBOSE

and read /etc/sysconfig and /etc/rc.firewall.
 
> I'm quite unexperienced to this subject and any help/documentation is welcome.

You can also look at http://coombs.anu.edu.au/~avalon/ for Darren Reed's 
ipfilter package.

If you don't know much about firewalling, buy a book.  It does not make 
sense to skimp on a $50 book when you are protecting your corporate network.

Danny