quick FW question

Tim Aslat tim at spyderweb.com.au
Tue May 11 19:26:08 PDT 2004


I hope this isn't too off topic, but I'd like a quick solution to a
problem.

I have a small network behind a NAT firewall (FreeBSD of course) and I'd
like to block/redirect all traffic from the internal network to the
local mail server (same box as firewall) in order to prevent direct smtp
requests to the outside world (mainly virus/trokan programs).

I think I have it right in this rule, but I would prefer to get a
second, or even a third opinion.

ipfw add fwd 127.0.0.1,25 tcp from any to me dst-port 25

Cheers

Tim

-- 
Tim Aslat <tim at spyderweb.com.au>
Spyderweb Consulting
http://www.spyderweb.com.au
Phone: +61 0401088479


More information about the freebsd-security mailing list