PF Firewall Setup

[tippekanu]

I appreciate the aims of the developers in putting together a "mainstream" BSD. So far, my experience so far is only with XPHome and limited time on Ubuntu 5.10 (very good install, btw. Hardware detection, package manager,etc. all excellent.)But what I really want is a good BSD! I have looked through the OpenBSD PF info, and searched the PC-BSD forums, but haven't found what I need so far on activation and setup of the firewall. My install is PC-BSD 1.0rc2 from purchased CD's. The PC-BSD firewall tutorial that most searches link to is: http://michael-and-mary.net/intro/?q=node/23
but this is for IPFW.
My setup is for 1 PC only, cable with DHCP, and a wired 4-port router/hardware firewall.
Until the official release comes out, can someone enlighten me on these questions?
1. Is there default firewall protection out of the box ala XP or Ubuntu?
In my install, it looks like all the firewall rules are commented out and
the firewall is not active.
2. What should my /etc/rc.conf file look like to activate my firewall?
3. I am not clear about defining the variables for ext_if and int_if.
My network settings in PC-BSD only show 1 network card.
If I only need to setup the external interface, can I use the default firewall rules as is?

4. How do I check to see what the firewall is doing? (ala Firestarter/Sygate)

Can anyone show me their firewall rule setup( etc/pf.conf) for 1 PC?
Apologies for all the noobish queries!!

I would really like to see a good GUI firewall setup and status app with
the final product.javascript:emoticon('')
Very Happy

Thanks in advance

[antik]

Thanks in advance

RTFM!

[scottro]

Estonia links to the handbook's page, which isn't a bad beginning, but, I'd say....

Start with my page

http://home.nyc.rr.com/computertaijutsu/pf.html

Hopefully, that gets you started. At the end of it are two links, one to Peter's pf page (he said nice things about mine) and the one that's considered more or less the main doc for it, the OpenBSD pf faq.

The man page is definitely heavy going for a newcomer, and makes more sense after you've looked at the three links mentioned above.

Also, the pfctl man page is important, but again, take a look at the three links given above, which should, hopefully, get you started.

[tippekanu]

Great links Scottro. Thank you!

[scottro]

Glad you like it.

[antik]

Glad you like it.

NYC links to he's own page, which isn't a bad beginning, but, I'd say....

Start with original OpenBSD PF manual!!!

[scottro]

Antik, sorry for calling you estonia--I was clicking the back button on my browser while writing my post to see who had posted, and my eye caught estonia. Simply a mistake made while in a hurry.

As for the other part of your post,
I'm standing by saying start with my page.
It's an intro to the more complex pages, and covers some common newbie errors, such as setting up rules, then locking yourself out of your machine.

You will note that my page suggests the two well known pf pages.

Anyway, once again, apologies for calling you estonia, as I said, my eye caught the wrong part of your post.

[Charles]

I hope we have a PF GUI later this year :roll:

[tippekanu]

If anyone is looking for some more helpful links on PF, these ones may help:

https://solarflux.org/pf/

Cheers

[antik]

Antik, sorry for calling you estonia--
Anyway, once again, apologies for calling you estonia, as I said, my eye caught the wrong part of your post.

Noo, that's fine Calling someone estonia is not offence.