Server FW Rules

Pedro Paulo Jr ppj at netfilter.com.br
Sun Jul 4 16:05:40 PDT 2004


ipfw add 10 allow all from 10.0.0.0/24 to any
ipfw add 20 allow tcp from any to EXTERNAL_IP http
ipfw add 30 allow tcp from any to EXTERNAL_IP https
ipfw add 40 allow tcp from any to EXTERNAL_IP ssh
ipfw add 50 allow tcp from any to EXTERNAL_IP ftp
<put aditional rules>
ipfe deny all from any to any
-------------------------------------------------------------------------------------------------------
I have a webserver that I would like to get a good set of firewall rules
for.  The only services that are running are http, https, ssh and ftp.  I
also have a trusted internal adaptor at 10.0.0.100

Thanks for your input,

Scott.


More information about the freebsd-ipfw mailing list