I use FreeBSD with ipfw and ip6fw. These are really good firewalls that allow rules based on source and destination addresses/subnets, ports, and protocols. You can even filter out various misc. events such as packet fragments and such.
These firewalls are controlled from /etc/rc.conf (if you want syntax look at /etc/defaults/rc.conf). The rules are defined in /etc/rc.firewall and /etc/rc.firewall6 Below are some links that I have come across that describe these firewalls very well http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html http://www.freebsd.org/cgi/man.cgi?query=ipfw&sektion=8 http://www.onlamp.com/pub/a/bsd/2001/05/09/FreeBSD_Basics.html http://www.acme.com/firewall.html If you have any further questions, please contact me. Daniel Delaney Anteon Corp. [EMAIL PROTECTED] [EMAIL PROTECTED] ----- Original Message ----- From: "Peter Bieringer" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, May 22, 2002 1:25 PM Subject: IPv6-enabled firewalling for *BSD - overview? > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi, > > you should know I'm very Linux related and really *BSD newbie ;-) > > for an update of an overview of my IPv6 course I ran into a > "knowlegde hole" of myself, but some looking around with Google don't > help me. > > Would be great if someone on the list is able to update me. > > How many (maintained) firewall code for *BSD is currently available? > I found > > ipfilter/ipf > http://coombs.anu.edu.au/ipfilter/ > IPv6: unknown > > ipfw > URL missing? Is this extra code? > > pf > http://www.benzedrine.cx/pf.html > IPv6: yes > > > 2 questions: > > a) what is "ipfw" > > b) any IPv6 status of ipfilter/ipf known? > > > TIA, > Peter > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.0.6 (GNU/Linux) > > iD8DBQE869SUe1eqe5WPQi0RAvECAKCnzPSn0q5s/lks3gx4TJVvbqWeLACgys1E > 7yKe0RZfFrONDxFpuMw8lTA= > =PX9S > -----END PGP SIGNATURE----- > > --------------------------------------------------------------------- > The IPv6 Users Mailing List > Unsubscribe by sending "unsubscribe users" to [EMAIL PROTECTED] > --------------------------------------------------------------------- The IPv6 Users Mailing List Unsubscribe by sending "unsubscribe users" to [EMAIL PROTECTED]
