best firewall for a web server

[Aiza]

Iv Ray wrote:
> We will be running a web server -
> 
> - FreeBSD 8.x
> - Apache 2.x
> - php 5.x
> - PostgreSQL 8.x
> - Postfix 2.x
> 
> - The server will run nearly 98% of the time below 25% load (no high performance firewall is needed).
> - Access to the server will be done only via ssh w/ key (there will be no public ftp, etc.).
> 
> I read several threads on FreeBSD Questions and checked the Handbook, and my conclusion is that PF seems the most straightforward for such "classic" situation.
> 
> Am I right?
> 
> Thanks,
> Iv_______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
> 
> 
I would use ipfilter. Its rules are the same as PF but its log is easier 
to read.