Hello and Welcome from United States to the UNIX and Linux Forums! Thank You for Visiting and Joining Our Global Community.
|
Hello and Welcome from United States to the UNIX and Linux Forums! Thank You for Visiting and Joining Our Global Community.
|
|
google unix.com
|
|||||||
| Forums | Register | Forum Rules | Links | Albums | FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
 |
| Security Discuss UNIX and Linux computer and network security, cybersecurity, cyberattacks, IT security, CISSP, OWASP and more. |
More UNIX and Linux Forum Topics You Might Find Helpful
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Question about pf firewall | sporky | IP Networking | 1 | 10-03-2008 12:45 AM |
| Set up your firewall with Firewall Builder | iBot | UNIX and Linux RSS News | 0 | 08-14-2008 04:30 AM |
| Firewall Box | Tabryan07 | UNIX for Dummies Questions & Answers | 2 | 09-17-2007 09:22 AM |
| ssh thru firewall | thangorn | UNIX for Dummies Questions & Answers | 3 | 02-22-2002 06:24 PM |
| BSD Firewall | deadletter | IP Networking | 3 | 01-06-2002 10:04 AM |
 |
Powered by 
|
|
|
LinkBack | Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
|
11-14-2008
|
||||
|
||||
|
PF firewall question (new to PF)
Ive been reading for the last week every piece of information on PF that i can find. I am in the process of building a FreeBSD 7.0 Router/Gateway and have been a little stumped by allot of the tutorials/examples out there. Most that I read say that you should always block all! But then I see a rule in the pf.conf that states
Code:
# allow traffic initiated from Router to outside pass out quick on $ext_if from ($ext_if) to any modulate state Sorry for the very newbie question. I have allot more but i'll start with the simple one. Hello every one! I am new to the board. |
|
11-14-2008
|
||||
|
||||
|
The idea is to block all traffic by default, and explicity allow traffic you want.
Remember when writing your rules, that PF operates in a 'top-down' fashion, meaning: Code:
block all allow all |
|
11-14-2008
|
||||
|
||||
|
Right. I understand that (forget it while writing rules though
 ) But if you are going to write a rule that allows "ALL" traffic out why block all? and not just block in? Is it just an accepted standard for writing the rules? |
|
11-14-2008
|
||||
|
||||
|
Code:
# allow traffic initiated from Router to outside pass out quick on $ext_if from ($ext_if) to any modulate state Last edited by glen.barber; 11-14-2008 at 06:16 PM.. |
|
| Bookmarks |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
Hybrid Mode
