From owner-freebsd-questions@FreeBSD.ORG Mon Aug 16 22:51:36 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 26B3516A4CE for ; Mon, 16 Aug 2004 22:51:36 +0000 (GMT) Received: from out008.verizon.net (out008pub.verizon.net [206.46.170.108]) by mx1.FreeBSD.org (Postfix) with ESMTP id B4F1E43D2D for ; Mon, 16 Aug 2004 22:51:35 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from [192.168.1.3] ([68.161.136.200]) by out008.verizon.net (InterMail vM.5.01.06.06 201-253-122-130-106-20030910) with ESMTP id <20040816225135.TREV8960.out008.verizon.net@[192.168.1.3]>; Mon, 16 Aug 2004 17:51:35 -0500 Message-ID: <41213A76.3010107@mac.com> Date: Mon, 16 Aug 2004 18:51:34 -0400 From: Chuck Swiger Organization: The Courts of Chaos User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.2) Gecko/20040803 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Paul Hillen References: <2D5D66504FBF4E4FB3A199F121C86238225A2A@exch1.nfmwe.com> In-Reply-To: <2D5D66504FBF4E4FB3A199F121C86238225A2A@exch1.nfmwe.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Authentication-Info: Submitted using SMTP AUTH at out008.verizon.net from [68.161.136.200] at Mon, 16 Aug 2004 17:51:34 -0500 cc: freebsd-questions@freebsd.org Subject: Re: Application level inspection - firewall? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Aug 2004 22:51:36 -0000 Paul Hillen wrote: > Quick question, is there an Application Level firewall available to FreeBSD. For some definitions of that buzzword, sure. > I understand IPFilter is a stateful packet filter, but has it or any other > packages moved to the next level - Application Level Inspection? Squid plus a firewall which blocks or redirects port 80 will serve for HTTP; Postfix or Qmail or whatever plus firewall rules which do the same for port 25 serve as application-level filtering for SMTP (enough to protect that Exchange server some people want to run), etc. -- -Chuck