Date: Wed, 31 Aug 2005 12:19:09 +0100 (BST) From: Robert Watson <rwatson@FreeBSD.org> To: dandee@volny.cz Cc: freebsd-current@freebsd.org Subject: Re: Application layer firewall on FreeBSD, is it possible ? Message-ID: <20050831121627.J39418@fledge.watson.org> In-Reply-To: <20050830185851.ECF554E704@pipa.profix.cz> References: <20050830185851.ECF554E704@pipa.profix.cz>
index | next in thread | previous in thread | raw e-mail
On Tue, 30 Aug 2005, [iso-8859-2] Daniel Dvo?ák wrote: > So, is there any way to do same application layer osi model firewall > with FreeBSD gateway ? > > Of course, I tried to find on web, I have not been successful in > searching so far. > > If my question is not right in this mailing list, if my question is > annoying here, so I am sorry. I can't speak to the details of the environment or protocols, but you might take a look at "ipfw fwd", which allows you to locally intercept wide area network TCP connections passing through an IP router. This can be used for things like transparent proxy caching, transparent firewalls, and so on. ipfw(8) contains some details, but I've not played with it myself so I can't tell you much more than that it looks like applications can simply bind a TCP port, and then you can use ipfw fwd to redirect connections to it. I'm not sure how well ICMP is handled. Robert N M Watsonhelp
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050831121627.J39418>