> Stan, > Seems as though a real good read of the man pages, the FAQ's and a google > here and there would help you out. > With regard to converting your IPF rules, why not just re-write them? > Unless your doing some serious stuff.....20 minutes?? Coming from the > land > of Cisco, I would say that PF is probably the easiest (decent) firewall I > have ever played with. Try access lists on IOS 12.x, then smile back at > PF...
Steve, Not to put down PF at all, it is a great piece of ART! But on your Cisco, please, just try reflexive access list and relax. Specially on 12.x. Easy that is, really is! ... interface Serial0 ... ip access-group inbound in ip access-group outbound out ... ip access-list extended inbound .... evaluate Firewall deny ip any any ... ip access-list extended outbound ... permit ip xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy any reflect Firewall deny ip any any ... Where xxx is your IP subnet and yyy is your range The above will get you going really quickly... Yes, you can add some rules for your servers, etc. But if you want to get yourselves up and running in no time, that will do it and keep you safe as well. Just 4 lines to put in, or add if you do not already have it... Not bad is it? Thanks Daniel
