firewall question...

[Francisco]

On Wed, 31 Dec 2003, Xpression wrote:

> Hi list, I've two servers running some services, now I want
> to firewall both them, do I need to build it on router or in
> the FreeBSD box...thanks.


That is totally up to you.
If you plan to do it on one of your FreeBSD machines I believe you will
need to have two NICs. At least that I believe is the easiest way to do
it.

There are some parameters you need in your kernel to use IPFW. Not sure if
PF needs kernel changes.

You very likely should be able to find previous posts and/or tutorials
online with how to setup either one, IPFW or PF. I do recommend though you
get yourself a good book on security so you understand all the parameters
and options you are going to need to deal with. Take a look at
/etc/rc.firewall. I believe they mention a book or two there that you may
want to consider reading.