Re: Optimal Home/Office Firewall Solution

From: Ash (ashcrow@phreaker.net)
Date: 07/13/02


From: Ash <ashcrow@phreaker.net>
To: "Britt A. Green" <bugtraq@experimentzero.org>
Date: 13 Jul 2002 16:35:53 -0500


> In other words, OpenBSD would probably be superior, but is it worth using
> while I climb the steep learning curve?

Warning, this is an opinion! :-)

I think that it would be best to set up a Unix firewall and playwith it
before implementing it on your home network. You could experiment with
it and play around a bit before attempting to use it in production. This
way you wouldn't be totally lost when trying to get it to work.

PF is pretty simple. Here are some good links on it:

Design and Performance of the OpenBSD Stateful Packet Filter - Daniel
Hartmeier
http://www.benzedrine.cx/pf-paper.html

The OpenBSD Packet Filter HOWTO
http://www.inebriated.demon.nl/pf-howto/

The OpenBSD PF Manpage
http://www.openbsd.org/cgi-bin/man.cgi?query=pf&apropos=0&sektion=0&manpath=OpenBSD+Current&arch=i386&format=html

Cheers,
Ash

---
Darkfire Secure Linux -- http://www.gnulinux.net



Relevant Pages

  • Re: Novice asks "OpenBSD best firewall?"
    ... you mean OpenBSD operating system? ... Is there any purchaseable firewall software that I can buy that works ... you can choose between OpenBSD Packet Filter ... I don't have experience with first one, but IPFilter is great. ...
    (Security-Basics)
  • Re: improving security on OpenBSD
    ... Then what don't you use pf (packet filter), ... If you don't want people to ping you and scan you then just block all incomming packet. ... http://geodsoft.com/howto/harden/OpenBSD/firewall.htm (Hardening OpenBSD Internet Servers ...
    (Security-Basics)
  • Re: help for seminar on firewall
    ... Also go through firewalls in OpenBSD .OpenBSD, ... claiming as the ... most secure OS in the world.Also firewalls(rather PF or Packet Filter) ...
    (comp.security.firewalls)
  • Re: help for seminar on firewall
    ... Also go through firewalls in OpenBSD .OpenBSD, ... claiming as the ... most secure OS in the world.Also firewalls(rather PF or Packet Filter) ...
    (comp.security.firewalls)
  • Re: Too tempting not to reply too.
    ... > As for your opinion, ... > As for using OPENBSD, Theo built it in such a way that YOU COULDN'T USE ...
    (comp.os.linux.security)

Quantcast