Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Feb 2004 13:13:08 -0500
From:      "Shaun T. Erickson" <ste@ste-land.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: Looking for ipfw info.
Message-ID:  <403E3734.1000007@ste-land.com>
In-Reply-To: <5.1.0.14.2.20040225221133.04fc5110@209.152.117.178>
References:  <5.1.0.14.2.20040225221133.04fc5110@209.152.117.178>

next in thread | previous in thread | raw e-mail | index | archive | help
Thanks for the resources.

A couple of questions (because I'm new to FreeBSD):

The ipfw man page in 5.2.1-RELEASE says that ipfw in CURRENT is ipfw2 
and that ipfw in STABLE is ipfw1. I still don't understand the 
releationship between RELEASE and the other two, so I am not sure which 
ipfw I have in 5.2.1-RELEASE.

I have read the following 5 excellent articles on ipfw, by Dru Lavigne. 
Even though they were written in 2001, and thus pre-date ipfw2, I found 
them to be a great crash course in ipfw, and the ipfw manpage in 
5.2.1-RELEASE just adds to it.

In Dru's first article, she(?) discusses how the kernel must be modified 
to support a firewall. She looks into /usr/src/sys/i386/conf/LINT to 
find the relevant information that needs to be added to my kernel conf 
file. I cannot find a LINT file on my 5.2.1-RELEASE system. Where can I 
find complete information on what I need to do to my kernel?

TIA

	-ste

P.S.: I find that ipfw rules are far more human-readable than I thought, 
and when comparing my linux server's ipchains rules to 
/etc/rc.firewall's "simple" firewall rules, I found them to be very 
similar. :)



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?403E3734.1000007>