Firewalls in FreeBSD?
Lowell Gilbert
freebsd-questions-local at be-well.ilk.org
Fri Oct 31 09:05:31 PDT 2008
Jeremy Chadwick <koitsu at FreeBSD.org> writes:
> On Thu, Oct 30, 2008 at 06:34:31PM -0500, Jack Barnett wrote:
>>
>> Ok, I had some progress with this last night. Basically what I do is:
>>
>> in natd - redirect_port 1000 to 10000 to the internal windows box.
>> set ipfw to "open" file wall.
>>
>> Obviously this isn't prefect - but gives some idea of what's going on.
>>
>> What I'd like to do, is a) keep the nat redirects since that works
>> pretty well.
>> b) in ipfw, ONLY allow data back on these ports IF the windows box has
>> established the connection out first then deny everything else.
>
> This is called "port triggering" in the residential router world. I
> don't know how to do this on FreeBSD.
Stateful rules are the only way to do it.
In fact, this is the main purpose of stateful rules.
--
Lowell Gilbert, embedded/networking software engineer, Boston area
http://be-well.ilk.org/~lowell/
More information about the freebsd-questions
mailing list