Firewalls in FreeBSD?
koitsu at FreeBSD.org
Thu Oct 30 16:39:37 PDT 2008
On Thu, Oct 30, 2008 at 06:34:31PM -0500, Jack Barnett wrote:
> Ok, I had some progress with this last night. Basically what I do is:
> in natd - redirect_port 1000 to 10000 to the internal windows box.
> set ipfw to "open" file wall.
> Obviously this isn't prefect - but gives some idea of what's going on.
> What I'd like to do, is a) keep the nat redirects since that works
> pretty well.
> b) in ipfw, ONLY allow data back on these ports IF the windows box has
> established the connection out first then deny everything else.
This is called "port triggering" in the residential router world. I
don't know how to do this on FreeBSD.
| Jeremy Chadwick jdc at parodius.com |
| Parodius Networking http://www.parodius.com/ |
| UNIX Systems Administrator Mountain View, CA, USA |
| Making life hard for others since 1977. PGP: 4BD6C0CB |
More information about the freebsd-questions