Re: Home Network, step by step?

From: Tyler Gee (geekout_at_gmail.com)
Date: 12/15/04

  • Next message: Kevin D. Kinsey, DaleCo, S.P.: "Re: makein ports" 
    Date: Wed, 15 Dec 2004 09:24:16 -0700
To: David Adam <zanchey@ucc.gu.uwa.edu.au>

    I would also recommend going with pf. As David said, the
    documentation is fantastic, it can do a myriad of things and is (IMO)
    quickly going to become the standard. The pf documentation includes
    three common scenarios, one of which is a home network with port
    forwarding, so you shouldn't have problems. Also, check out
    bsdforums.org and just do a search and you will find a lot of things.

    -wtgee

    On Wed, 15 Dec 2004 09:11:32 +0800 (WST), David Adam
    <zanchey@ucc.gu.uwa.edu.au> wrote:
    > On Tue, 14 Dec 2004, R. Scott Kennan wrote:
    >
    > > One other thing I don't understand is why I'm being told to install
    > > the firewall in this context; are firewalls more than just an
    > > intrusion countermeasure? Do they do any 'lifting' on a network beyond
    > > blocking unauthorised transfers?
    >
    > They do now.
    >
    > Partly in response to cleverer security threats, and partly as a
    > convergence between routing and firewalling, most modern firewalls - like
    > ipf and pf in FreeBSD - are now not so much firewalls, but packet filters.
    > They have the ability to inspect and modify any packets going in any
    > direction on various interfaces. This makes them an invaluable tool on
    > routers in any environment (except, perhaps, Internet core routers, but
    > they're another case entirely).
    >
    > By the way, someone up the thread a bit recommended you start running
    > IPFW (IPFIREWALL). While I'm not currently in a position to give you
    > instructions as detailed as James did, I would recommend you start with
    > either ipf or pf. IPFW is much older and is somewhat less well maintained,
    > the documentation in particular.
    >
    > >From the Handbook's IPFW Chapter...
    >
    > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipfw.html
    >
    > "The IPFW stateless rule syntax is empowered with technically
    > sophisticated selection capabilities which far surpasses the knowledge
    > level of the customary firewall installer. IPFW is targeted at the
    > professional user or the advanced technical computer hobbyist who have
    > advanced packet selection requirements."
    >
    > (Proper use of freebsd-newbies@ approaching!)
    >
    > I've had superb results with pf (although for full effect, it will require
    > a kernel rebuild). The pf documentation at OpenBSD is very well written
    > and easy to follow. Setting up NAT can be a somewhat daunting task
    > (personally, I do it at home with Windows' ICS, which is an absolute
    > no-brainer) - however, once you get it working it is extremely useful.
    >
    > Best of luck! (I really should get back to work - if I can get my system
    > at home logged on to the 'net I'll try and run you through the basics of
    > setting it up if you still need it.)
    >
    > Cheers,
    >
    > David Adam
    > ---
    > zanchey@ucc.gu.uwa.edu.au
    > Medicine: And you thought hacking computers was complex.
    >
    > _______________________________________________
    > freebsd-newbies@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-newbies
    > To unsubscribe, send any mail to "freebsd-newbies-unsubscribe@freebsd.org"
    >
    _______________________________________________
    freebsd-newbies@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-newbies
    To unsubscribe, send any mail to "freebsd-newbies-unsubscribe@freebsd.org"

  • Next message: Kevin D. Kinsey, DaleCo, S.P.: "Re: makein ports"

    Relevant Pages

    • Re: Learning Code...Fast
      ... > software project that uses a nearly obsolete toolkit ... this is often an indication of poor quality. ... tools and techniques I'd recommend: ... you're going to need more than just documentation. ...
      (comp.arch.embedded)
    • Re: They can break ZoneAlarm easily !
      ... made for your average Joe ZA should not only block this by default (which I ... intuitive documentation is all part of the whole picture. ... LAN but had to open the port in both trusted and internet zones in order to ... time(this seems to a problem with a lot of personal firewalls however). ...
      (comp.security.firewalls)
    • Re: A better find subroutine
      ... to do this and frankly thats why i'm posting in perl begginers:) ... I recommend just reading that module's documentation. ... For CPAN modules, ...
      (perl.beginners)
    • Re: Questions about Coding Practices
      ... the trinary conditional operator compiles the entire statement before it actually execute them. ... Use extensive external documentation for API documentation. ... What I _would_ recommend eschewing, and perhaps this is what the book means also, are comments _within_ the method body. ...
      (microsoft.public.dotnet.languages.csharp)
    • Re: BufferedInputStream -- does not recommend "close()"?
      ... I had expected the constructor documentation to ... future to avoid resource leaks, ... The tutorial also does not recommend close: ... Why is it not recommended in the documentation nor the tutorial? ...
      (comp.lang.java.programmer)